last executing test programs: 1m24.228012659s ago: executing program 4 (id=1231): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80006e}, 0x1c) socket$kcm(0x29, 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200020000000800000014000c8008000300fffffffffffffffaf6ffffff06000300", @ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b0200262f"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000001) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0xfe4e, 0x6, 0x7, 0x4, 0x42, 0x100000001]}, &(0x7f0000000500)=0x78) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) (async) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) (async) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) close(0x4) 1m12.18259028s ago: executing program 1 (id=917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) (async) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) socket$inet(0x2, 0x3, 0x7f) (async) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) 1m11.172377704s ago: executing program 4 (id=1231): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80006e}, 0x1c) socket$kcm(0x29, 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200020000000800000014000c8008000300fffffffffffffffaf6ffffff06000300", @ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b0200262f"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000001) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0xfe4e, 0x6, 0x7, 0x4, 0x42, 0x100000001]}, &(0x7f0000000500)=0x78) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) (async) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) (async) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) close(0x4) 56.460653307s ago: executing program 1 (id=917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) (async) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) socket$inet(0x2, 0x3, 0x7f) (async) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) 55.924889406s ago: executing program 4 (id=1231): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80006e}, 0x1c) socket$kcm(0x29, 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200020000000800000014000c8008000300fffffffffffffffaf6ffffff06000300", @ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b0200262f"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000001) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0xfe4e, 0x6, 0x7, 0x4, 0x42, 0x100000001]}, &(0x7f0000000500)=0x78) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) (async) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) (async) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) close(0x4) 41.922035362s ago: executing program 1 (id=917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) (async) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) socket$inet(0x2, 0x3, 0x7f) (async) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) 40.688502481s ago: executing program 4 (id=1231): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80006e}, 0x1c) socket$kcm(0x29, 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200020000000800000014000c8008000300fffffffffffffffaf6ffffff06000300", @ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b0200262f"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000001) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0xfe4e, 0x6, 0x7, 0x4, 0x42, 0x100000001]}, &(0x7f0000000500)=0x78) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) (async) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) (async) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) close(0x4) 28.630755168s ago: executing program 1 (id=917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) (async) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) socket$inet(0x2, 0x3, 0x7f) (async) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) 27.759121086s ago: executing program 4 (id=1231): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80006e}, 0x1c) socket$kcm(0x29, 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200020000000800000014000c8008000300fffffffffffffffaf6ffffff06000300", @ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b0200262f"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000001) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0xfe4e, 0x6, 0x7, 0x4, 0x42, 0x100000001]}, &(0x7f0000000500)=0x78) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) (async) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) (async) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) close(0x4) 13.939592491s ago: executing program 1 (id=917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) (async) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) socket$inet(0x2, 0x3, 0x7f) (async) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) 12.592027882s ago: executing program 4 (id=1231): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80006e}, 0x1c) socket$kcm(0x29, 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000400002800c0002800500010600000000000000400000000006000340000200000c000280050001000100000014000180080001000000000008000200ac14142c"], 0x54}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200020000000800000014000c8008000300fffffffffffffffaf6ffffff06000300", @ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b0200262f"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000001) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000480)={'nat\x00', 0x0, 0x0, 0x0, [0xfe4e, 0x6, 0x7, 0x4, 0x42, 0x100000001]}, &(0x7f0000000500)=0x78) socket(0x2, 0x80805, 0x0) (async) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) (async) setsockopt(r10, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) (async) ioctl$TUNGETVNETLE(r5, 0x541b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) close(0x4) 2.407626173s ago: executing program 0 (id=1799): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250af7a19d98c880e1b30400000000001800000000000000000000000000003db0519c2ae7179490"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r1, &(0x7f0000000080)=0x8, 0x12) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff9500000000000000df8f45344b47cb075d3f17d331ec8a75ecff9660ee4bc850"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r6, 0x1, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}}, 0x0) 1.85267084s ago: executing program 3 (id=1800): r0 = socket(0x2, 0x3, 0xff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000180)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880004d6c9db0000db15d088bd8b7000000000d9ce9bc7e28d94000200ff01800a0000ebfc0607bdfd5910547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840", 0x90) (async) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000140)=@in={0x2, 0x4e24, @multicast2}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x0, 0x1}], 0x10}, 0x30040000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0xffffffff, 0x9, 0x9002, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0xb, @value=r0}, 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 32) 1.642416947s ago: executing program 0 (id=1802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r4, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x1) shutdown(r4, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100000000000000000000060000", @ANYRES32=r7, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007002001000000000000000000000000000214000700fe8000000000000000000000000000001400070020010000000000000000000000000001050008000000"], 0x134}}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r1, r0, 0x0, 0xf03a0005) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCRSSL2CALL(r8, 0x89e2, &(0x7f00000000c0)=@bcast) socket$nl_generic(0x10, 0x3, 0x10) 1.58343378s ago: executing program 3 (id=1804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1402, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000400bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.388887204s ago: executing program 3 (id=1806): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0700147ea64e21160af3650ab68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538", 0x58}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000280)=""/99, 0x63}], 0x2}, 0x0) 1.225058972s ago: executing program 3 (id=1807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000df431bc554f77ca425234b81a75d00000000000800000000000000000000000000000000000000e9"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@empty, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@empty, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000009c0)={'tunl0\x00', 0x0, 0x1, 0x20, 0x3, 0x3, {{0x2d, 0x4, 0x0, 0x7, 0xb4, 0x7, 0x0, 0x0, 0x2f, 0x0, @empty, @remote, {[@ssrr={0x89, 0x1b, 0x7d, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @ssrr={0x89, 0xb, 0xa5, [@multicast2, @loopback]}, @generic={0x88, 0x10, "bbfb3095621ff043d42ff5ad2e1c"}, @timestamp_prespec={0x44, 0x3c, 0xc4, 0x3, 0x8, [{@private=0xa010100, 0x9}, {@multicast2, 0x6}, {@multicast2, 0x6}, {@remote, 0x81}, {@remote, 0x7}, {@empty, 0x8}, {@loopback, 0x80}]}, @timestamp_prespec={0x44, 0x2c, 0xa1, 0x3, 0xc, [{@private=0xa010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010101, 0x77cd}, {@multicast1, 0x4}, {@multicast2, 0xc}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x0, 0x7, 0x40, 0x6, {{0xf, 0x4, 0x1, 0x17, 0x3c, 0x65, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x1b, 0x4a, [@local, @private=0xa010100, @broadcast, @empty, @empty, @remote]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'sit0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x4df, 0x3, {{0x7, 0x4, 0x3, 0x1d, 0x1c, 0x67, 0x0, 0x7, 0x0, 0x0, @multicast2, @private=0xa010101, {[@noop, @rr={0x7, 0x7, 0x6b, [@loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1000, 0xc39, {{0x6, 0x4, 0x0, 0x36, 0x18, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast1, @local, {[@end]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000740)={@local, 0x0}, &(0x7f0000000780)=0x14) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r3, @ANYBLOB="000429bd7000ffdbdf2511000000200001801400020069705f76746930000000000000000000080003000000000070000180140002006272696467653000000000000000000014000200766c616e3100000000000000000000000800030001000000140002006c6f00000000000000000000000000001400020070696d367265673000000000000000001400020076657468305f766c616e0000000000003000018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e31000000000000000000000008000300030000002800018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002007663616e30000000000000000000000014000180080003000000000008000300030000005000018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="0800140002000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=r12, @ANYBLOB="080003000200000008000300030000000c0001800800030001000000"], 0x16c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r15 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0) 1.164436559s ago: executing program 2 (id=1808): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000400)="7fc3be6143a5938d7cd3b3e7cde13692a0ed481c3ef9a4d1a0c65a2655393f1ce1736f087bd490c735cbdef611560b77ac4a223ec0eeb33839abe837cbcc0307621d7c24620b6ef024a5938ada3bf9bacef524692b291a5db280bae35bd921ed025964c62939d69044d959c767cce41f634a315b7105ddf7ae46", 0x7a}], 0x2, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}, 0x44000) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x3}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) (async) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) (async) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x1, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x23, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x14814}, 0x10008000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYBLOB="cf56ca8d41246a85fca2c3584aca791d826ee1d3bfd6d6a603570e470c", @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet6(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="11", 0x1}], 0x1}, 0x2000c0d1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000007305580000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000200)={r0, 0x0, 0x9}) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000200)={r0, 0x0, 0x9}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) unshare(0x24020400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r9, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r9, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 862.561875ms ago: executing program 2 (id=1809): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r1, 0x89e0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="f78d9ca38fff48fbbe52163448412ba809b150756bfc68992619a82eeea08e7d4118e01c14eca5f4fc45c0fbb8c4fb90f1434e0b81882a3ab12d124e08656c79e8265039f239b3e2f30c94fd41b6db1a3c9b6016ac7bc45db9ab83b74a7f6bbc6e40bc221b51d43fd737364d789acf0bebdaf35119254a69", 0x78}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 848.48083ms ago: executing program 3 (id=1810): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0xffffffff, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0xf0, 0x1e0, 0xffffffff, 0x370, 0x0, 0x488, 0x488, 0xffffffff, 0x488, 0x488, 0x5, &(0x7f00000000c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'veth1\x00', 'vlan0\x00', {}, {0xff}, 0x4, 0x6, 0x3, 0x64}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@remote, @ipv4=@rand_addr=0x64010100, @icmp_id=0x68, @port=0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@rand_addr=0x64010101, @ipv6=@mcast1, @port=0x4e21, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x120, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x57, 0x9, 0x1}}, @common=@hbh={{0x48}, {0x90, 0x4, 0x1, [0x1, 0x26, 0x4, 0x7ae, 0x1, 0x64, 0x4, 0x3, 0xb437, 0x80, 0x6, 0x10, 0x8, 0x0, 0x3, 0x9], 0x10}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x4, 0xd6c1, 0x1, 0x0, "6884b0e37660e7540caf5f0a928c0a8dbd5b9346d0f8e3d8070d521303dc92917bef13fcbce11e2841eda2c7095b175c7efefd7ee4212e7e577deb3a9a3fcc3e"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x100, 0x4c, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}, @ipv6=@private2, @gre_key, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f0000000700)="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", 0x1000, 0x4000025, &(0x7f0000001700)={0xa, 0x4e21, 0x5, @empty, 0x76324ffa}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001740)={@initdev}, &(0x7f0000001780)=0x14) splice(r1, &(0x7f00000017c0)=0x19000, r0, &(0x7f0000001800)=0x3, 0x2, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000001840)="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") socketpair(0x22, 0x1, 0xad, &(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f8, 0x1f8, 0x298, 0xa0, 0xa0, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, &(0x7f0000002880), {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x400, @broadcast, 0x4e22}}}, {{@ip={@local, @multicast2, 0x0, 0xff, 'pim6reg0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x32, 0x0, 0x4}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, 0xffffffff, 0xff, 'vcan0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x67, 0x3, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x9, @rand_addr=0x64010101, 0x4e22}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0xffff, 0x7fffffff]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x35}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002d80)={'batadv_slave_0\x00'}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000002dc0)={0x0, 0xea60}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002e40), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x24, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) clock_gettime(0x0, &(0x7f00000083c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000008240)=[{{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f40)=""/176, 0xb0}, {&(0x7f0000003000)=""/138, 0x8a}, {&(0x7f00000030c0)=""/145, 0x91}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x4}}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000041c0)=""/207, 0xcf}, {&(0x7f00000042c0)=""/194, 0xc2}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/86, 0x56}, {&(0x7f0000005440)=""/171, 0xab}, {&(0x7f0000005500)=""/61, 0x3d}, {&(0x7f0000005540)=""/156, 0x9c}, {&(0x7f0000005600)=""/178, 0xb2}], 0x8}, 0x8}, {{&(0x7f0000005740)=@phonet, 0x80, &(0x7f0000006b40)=[{&(0x7f00000057c0)=""/169, 0xa9}, {&(0x7f0000005880)=""/14, 0xe}, {&(0x7f00000058c0)=""/153, 0x99}, {&(0x7f0000005980)=""/173, 0xad}, {&(0x7f0000005a40)=""/62, 0x3e}, {&(0x7f0000005a80)=""/113, 0x71}, {&(0x7f0000005b00)=""/56, 0x38}, {&(0x7f0000005b40)=""/4096, 0x1000}], 0x8, &(0x7f0000006bc0)=""/158, 0x9e}, 0x1}, {{0x0, 0x0, &(0x7f0000007cc0)=[{&(0x7f0000006c80)=""/4096, 0x1000}, {&(0x7f0000007c80)=""/33, 0x21}], 0x2, &(0x7f0000007d00)=""/118, 0x76}, 0x2}, {{&(0x7f0000007d80)=@generic, 0x80, &(0x7f0000008040)=[{&(0x7f0000007e00)=""/27, 0x1b}, {&(0x7f0000007e40)=""/45, 0x2d}, {&(0x7f0000007e80)=""/188, 0xbc}, {&(0x7f0000007f40)=""/197, 0xc5}], 0x4, &(0x7f0000008080)=""/118, 0x76}, 0x42ff}, {{&(0x7f0000008100)=@nfc_llcp, 0x80, &(0x7f00000081c0)=[{&(0x7f0000008180)=""/41, 0x29}], 0x1, &(0x7f0000008200)=""/19, 0x13}, 0xc9d9}], 0x6, 0x2, &(0x7f0000008400)={r6, r7+10000000}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000008440)='blkio.throttle.io_serviced\x00', 0x0, 0x0) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000008480)=0xf, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000008740)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000008840)=0xe8) r10 = getgid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000008880)=0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000088c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f00000089c0)=0xe8) r13 = accept$nfc_llcp(r4, &(0x7f0000008a00), &(0x7f0000008a80)=0x60) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000008ac0)=0x0) r15 = getgid() r16 = socket$phonet(0x23, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000008c40)=[{{&(0x7f00000084c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008700)=[{&(0x7f0000008540)="7f2e5e0f87cf08b0d80918c752b2a60f4d057185b7e79c80d5d20c246fc6508c932fef595df626dd0773d9f8181343b9345be6139a36ec14e46878f1e4f137ac56b18c0978fb660d0772d6504e2b5cfc234940e86229fe5b4423cb10a96089f6a5a72fae5076c22e98689d9c79dea35fd1340623ec15d8922c1d08d039f5f1e15c17", 0x82}, {&(0x7f0000008600)="16ed52f17d3464261f358c814c9ed11134c49df37f394b38264fa3744757a0f308a23c7ed3bbb869d8a1f418e2285eafac8cef45e2f1982b00d7a96389715270b18c4615c2fd2cab040470ccd56b48768fba12200cfb7a2b0cd1450da0f72f8ddd893dd156fdebdc36567b42c9", 0x6d}, {&(0x7f0000008680)="82aea1e0a853042b5d3fb0cf25e88e36ebaca171bff4cc67bbf63b4fab956561ebffc180489a1a2a6d829f9b0dec5f161cf76921033da18dc84fe04f52cdac22ba12efed1229d128ab4e0b1dcfb2d32a87b4a696dff7796d9a791ed9f0e3007f1136", 0x62}], 0x3, &(0x7f0000008b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r13, r0]}}, @rights={{0x20, 0x1, 0x1, [r8, r0, r4, r1]}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0x0, r15}}}, @rights={{0x38, 0x1, 0x1, [r4, r3, r0, r2, r2, r8, 0xffffffffffffffff, r3, r3, r1]}}, @rights={{0x28, 0x1, 0x1, [r2, r8, r16, r4, r1, r8]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r8, r8, r2]}}], 0x138, 0x40000}}], 0x1, 0x800) 703.050605ms ago: executing program 0 (id=1811): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="d4020000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) sendmsg$inet6(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x808c1) 592.320265ms ago: executing program 3 (id=1812): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="5825fb8f6ab0f6aec35ad8aa0000000000ffff0000eae2296b1292241a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x4, 0x2008}, 0x20) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 521.622454ms ago: executing program 2 (id=1813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="23e689f0dc211825e7aac360f5fd696d0000e3439e8a479d2c7d8ca5959acbb77a46084c58d1fe", 0x27}, {&(0x7f0000000240)="d648454e1d0f676801181e4308a23f3fbbacc7ae08f055e759cf8df1468b3a5b24a99382d75a946982a693d131c1795aeac79c22673c42e5e0b1c8a514c0fb3608ab237fae578a13a43745816d281dbe3ffd5ffe0b", 0x55}, {&(0x7f00000002c0)="3e5ba1ff30bbec18703966a1694ae4236a1d034ed5bbdb6fa79b408227043a5c7f37d5caf4b981b373706f1558089cb6ff9c136d496ba1eb68875bc614cca7018abfa187", 0x44}], 0x3}}], 0x1, 0x20040804) (async) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000)=0x7, 0x4) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket(0x29, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x200, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 426.593924ms ago: executing program 0 (id=1814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000007"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0040b00000000000000000000000000000000000edad56e8c0043a0a0b58e3a0232d23a1bd94e501731e202c439a09287b67b32ec3ba897a55464373c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000007b0ab3d8edc746e0ff000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r5, 0x0, r8, 0x0, 0x8, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'ipvlan1\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x1, 0x0, 0xffffff75, 0x400000, 0x0, 0x4]}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x6, 0x60, 0x7, 0x4}, {0x7, 0x97, 0x35, 0x10001}, {0x0, 0x4, 0xf9, 0x8}, {0x0, 0x3, 0x4, 0x9}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000007"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0040b00000000000000000000000000000000000edad56e8c0043a0a0b58e3a0232d23a1bd94e501731e202c439a09287b67b32ec3ba897a55464373c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000007b0ab3d8edc746e0ff000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) pipe(&(0x7f0000000000)) (async) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r7, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) (async) splice(r5, 0x0, r8, 0x0, 0x8, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'ipvlan1\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x1, 0x0, 0xffffff75, 0x400000, 0x0, 0x4]}}) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x6, 0x60, 0x7, 0x4}, {0x7, 0x97, 0x35, 0x10001}, {0x0, 0x4, 0xf9, 0x8}, {0x0, 0x3, 0x4, 0x9}]}, 0x10) (async) 332.686405ms ago: executing program 2 (id=1815): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000903000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xfffffffffffffeca, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 237.527149ms ago: executing program 2 (id=1816): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@loopback, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x26, 0x8000, 0x81, 0x8}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x26, 0x8000, 0x81, 0x8}}) 162.850112ms ago: executing program 0 (id=1817): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/73, 0x49}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000100)=""/236, 0xec}, {&(0x7f0000000200)=""/172, 0xac}], 0x4, &(0x7f0000000840)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000300)=""/91, 0x5b}, &(0x7f0000000380), 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x8, 0x20000000}, &(0x7f00000003c0)=0x1, &(0x7f0000000400)=0x101, 0x3, 0xb, 0x900000000000000, 0x1, 0x2, 0x8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x4}, &(0x7f0000000440)=0x400, &(0x7f0000000480)=0xfffffffffffffffb, 0x0, 0x8, 0xb, 0x40, 0x21}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0x2}, &(0x7f00000004c0)=0xfffffffffffffff8, &(0x7f0000000500)=0xf, 0x1, 0xab, 0x1, 0x4, 0xc, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x7fffffff, 0x7ab}, &(0x7f0000000540)=0x9, &(0x7f0000000580)=0x9, 0x0, 0x80000000, 0x0, 0xe154, 0x67, 0x7ff}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0xb51d}, {&(0x7f00000005c0)=""/127, 0x7f}, &(0x7f0000000700)=[{&(0x7f0000000640)=""/41, 0x29}, {&(0x7f0000000680)=""/111, 0x6f}], 0x2, 0x1, 0x60b9}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x7}, &(0x7f0000000740)=0x1000, &(0x7f0000000780)=0x7f, 0x2, 0x3, 0x8, 0x2, 0x0, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x2}, &(0x7f00000007c0)=0xcb, &(0x7f0000000800), 0x7, 0xc2b, 0x1000, 0x1, 0x0, 0x7}}], 0x288, 0x24000081}, 0x20000800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$inet(r1, 0x0, &(0x7f0000000b40), 0x81000) (async) r3 = accept(r1, &(0x7f0000000b80)=@hci, &(0x7f0000000c00)=0x80) r4 = epoll_create(0x1ff) (async) r5 = socket$key(0xf, 0x3, 0x2) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003540)={0x0}, &(0x7f0000003580)=0xc) (async, rerun: 64) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000035c0)={0x0, 0x0}, &(0x7f0000003600)=0xc) (rerun: 64) r8 = getgid() r9 = gettid() (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003640)={0x0, 0x0}, &(0x7f0000003680)=0xc) (async) r11 = getgid() (async) r12 = gettid() (async) r13 = getuid() (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003d00)={0x0, 0x0, 0x0}, &(0x7f0000003d40)=0xc) (async, rerun: 64) r15 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000003d80), 0x800) (async) r16 = socket$phonet(0x23, 0x2, 0x1) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003dc0)=0x0) (async, rerun: 32) r18 = getgid() (rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003e00)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000003f00)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003f40)={0x0, 0x0, 0x0}, &(0x7f0000003f80)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003fc0)={0x0}, &(0x7f0000004000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004040)={0x0, 0x0, 0x0}, &(0x7f0000004080)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000040c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004100)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000004200)=0xe8) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004240)={0x0, 0x0, 0x0}, &(0x7f0000004280)=0xc) sendmmsg$unix(r3, &(0x7f0000005800)=[{{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="ef4cddf54825852929ceb40710fca6bbcae3878e9a8f09a7e3fdbd0ce359e7ed476c4e8552dbccad36258b04e9fa02aaedf3730ff666faf97a90ee9ba7b2ee27a8e7aeb7", 0x44}, {&(0x7f0000000d40)="a704a6ff65e3fe55b1029fef796c2d1c1da5ccb51f81b30ee77d20c975470e5fe87bac9c3963496184e3905f0a920d774d12eec1a97d1a7df0fb2ff12ec82199b655536eacea9386e15853962dc49262619963542411", 0x56}], 0x2}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="d66ab5c1e55e23d58b37fb718530f1988796e17420940f4e0233b9084b2c8fd8b560da7e6201db8c61a2827317cfafb6dec3b9ef1ce855b9006ed92e4e0038305d6cd0f9c32166de17f58218a40b8b2ef768a0126bea35ccccedb635982327fe4ab7246d33f88c909ae232415fbc806cfb4d990a3496fb4de57264b8912555784bfe5847052e4e344e87bd76b846", 0x8e}, {&(0x7f0000001ec0)="a67ca602db1bcc3cba6be2f78ec40b910401d7368b541972db3d843fe0b811658a32141d1982c9cbe3b3da3b0e84c7", 0x2f}, {&(0x7f0000001f00)="9479122dcdf08a0e35dd9c8c856a6ca399c779033152deaa0115039d801b1013a5472acec9a8a09038afb02c476e267f0a7b61e7522642309073d33827d4a0f8b011b2e36e41495ed3b8e6a77960484bccbfadd0511fd6a26446e23074e2fd0461adad2070c93ecbfa686b86cf274e", 0x6f}], 0x4, &(0x7f0000001fc0)=[@rights={{0x28, 0x1, 0x1, [r4, r2, r5, r0, r1, r2]}}], 0x28, 0x80}}, {{&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)="939fc383f4ef7aa19ca1c94e5aada6a430aa655b5968259d54e0920be64d381fb95a8fa027f39bb13d0a154eb6b29a", 0x2f}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="06f461a70e72576701f589d2f16a2989572824e16fd861486bf212f31e288954aa19a4838c9e9849db77f0ef", 0x2c}, {&(0x7f0000003140)="b32057afa0cab33e52dc7feb986ab41a34a5315e5f28be997c39ea4dae57ed019573d7beadc302bd60f5a8c5e03bdabe1cac5fa06f846391d37541aa5915fca43c492bdf666e1540869b47b5c940761aca05e110f8ac094cb19f4f0b21e9e6f668da6ed3b2691352f8b51935f1f8dc6dfde74c99646b1d71381404bf7099382f30362a0b978858df39", 0x89}, {&(0x7f0000003200)="2908614eb9c5b1398ae46e0f2b29a34b25d98675d6b08ab19ffff82694577e12add087a8f79f0a5b8fbf1f409f138f24fa56ce7b15", 0x35}], 0x6, 0x0, 0x0, 0x2000c081}}, {{&(0x7f00000032c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003340)="83b614318fa66a6dbed3ae781535460e229dd250737a06930c212e85ac8072f0528ccc67cc0dff00103a364b9a5c4f7106ffe47a9b2e47cac7be46037318905edf7f5404dc0839db81c4664187528c262c841363b8ecd260c0ae4f5b3542abcf966437ad6da58705f8260842557f6626681c604141a60a50", 0x78}], 0x1, &(0x7f0000003400)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18, 0x4000000}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)="46817ddeb0be29a2f4766d686a420415181a3f64b87b40c4d0f55c054fae32312e922c96c8d4244b6e79f1d15b6d954a669320f939aa02d6ed1433e95a34edf6f6d0f8203688e47b14a77c4fea56e6a5b96a8ae534c32bc4e64a1a5cb010001a6f1ecff6e6981f83fe442dc83f7edc80852fbc34263de9ac6a9008162662e0977c50ad94918a9d5a73df1641959f9db6eebb79777020fc49064405edcb8e3e9cf943b24f237d6df37bda9572cd7c9acc802ce9ca50fe41df55", 0xb9}], 0x1, &(0x7f00000036c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x58}}, {{&(0x7f0000003740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000037c0), 0x0, 0x0, 0x0, 0x20000005}}, {{&(0x7f0000003800)=@abs={0x1, 0x0, 0x2}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003880)="d2e2541a9f97173370045b94e9cc55eea1bd0c9e0048ee8612562780c1e8118fc8e84fc20417f17f8ea4a55d63f416814568489859f9a9eda22c10a180d1b709de02ca634a90b0595f7f4c167022414092c7c661d8bd11a82ba73e5b25026a7e209c255ebcf68ece089b6b77cac41c19982cdb9beb439acec8fbb6a3288c", 0x7e}, {&(0x7f0000003900)="d8afa9e5a463abf55d8634796c7849268b9adcafeb430347689be1ecda735064b31eba0b60f8bd95eb90eaab91d64d9da9e9de5c6cbfde1313ee20d830f768e293f3622f4505d9418ace50", 0x4b}, {&(0x7f0000003980)="a26ec8ed630b9fbbe657b0cacae689913e09fe39839f229ed3fa390649e6d6c2d0d11c630f08", 0x26}, {&(0x7f00000039c0)="f4b8bc7f36c46e056691280a9cae991d4bd38dd3bba6b6c30e9c3318a53e099073f7670fbbbb8c8f3c2b51c6e482c5cd37d07fca75375679f90aec64db1e57563709e4692e59501cd0f39b7ac6ec253fb677505b0ff9c289654c9815c9deb0aa920a81220384552a9ac7b5bc57a9b631dfb38cba6fcc7fb9697783cb1827807303cb", 0x82}, {&(0x7f0000003a80)}, {&(0x7f0000003ac0)="caa82cf50a0a1290b5601a39a16cba6025c9b4302e156197d23347329f09748f6f886b31590099d795d206f555cbf0b4e50450d4a9c6d96f2db6e7daf1ef96c3192ce786d8a01e0e019180e19bb2c669365f2ebfe25c2fcf2940ccaea5548ce5cbd41d632e8c300f50a9f539d0781b95e4afd4536c3a1ab6", 0x78}, {&(0x7f0000003b40)="928c26523c3503f85ddd9499bd094883ed768f6ccaad2d641e9e6ef03f71ff9e832f975638adfd8f4274ac16655661d5b7c4770024873778e73d8bf8eb71c8ca832b86592381d3d0540bc7afd865499a21d23a98d9018610e3ec7b1a988a488cecc24778946cba6737ac", 0x6a}, {&(0x7f0000003bc0)="afee9e6bef5973f6e8a765b6044630c88707344da2815c47a2b83a87e209a60f18", 0x21}, {&(0x7f0000003c00)="23749725e1124085efb3f8b4bcc5029b0a59769962ef2cffc0df6ec0161e4ab754e049075635ea44ef6a", 0x2a}], 0x9, &(0x7f00000042c0)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r15, r16]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r17, r18}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r2, r0, r1, r2, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, 0xee01, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}], 0x100, 0x4008044}}, {{&(0x7f00000043c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005740)=[{&(0x7f0000004440)="9c87780b8e9df87779b389d5d57b344cab98add2c88ac87e87d4d71be9d2dddb04244725f1d6152894bddbf7163728c5dcda5874e2134f8fad0e3bdd970acce848254b7ee1e1ad04f9ae8499d713a58dd425668a7d4f06ba268c1ccda6bbf5e8ab733e51da040ee4d72eae8c6172f09273707296edf6ec4e3b05981efe8e271240e3180c5bfd355ceb99b9f6152853249271658f0a9fd7ac2b8d2f3843c06d014053ec130e", 0xa5}, {&(0x7f0000004500)="0bee2ccf482f1a83c509650a9b4bdfe8b2b983c1e247b88c1cc8e6eecec1d0279f70e79a21acd531b68530648afd30df1c7c2923e428dc5512c427b41de4911b4d92ee295f79828cae7df6b8fae4580d624f", 0x52}, {&(0x7f0000004580)="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", 0x1000}, {&(0x7f0000005580)="eb66673d741545b98019f5fbeec3c66e15dd889f8fadb613febcf7d915303b73d0bfed8de828f6cc02d14e9947c66e1e0770db5e173b810a156516c8f3625f43e45369c63adf4bd6e2a14dabb8c3146a51ebafb7be4d97439f423d511ec6102971d7dd6fdf44aa82d75fd97b0755b4f055aa6405bcf236574264c73dc59ed7c86e9a56f5e5351cb1fd217b67a4ebb3b353fff099b84f1f5c482457f413b5845ad5b766322e6c3e3d194f2a", 0xab}, {&(0x7f0000005640)="6d6aa6038be349ba641499150185a2ea56ea996d60ae561bc746b2044e545df9ca057d7417126a6196c846cd4d2ca470de973361674ccebaa1a77b6b4b08142f22969de60f48f9620cbb66531083409c9eb220d7c701a295a11a16b9a15f866ca77a54836eb1ca3f7f58ffd4d51a364decc0c6c30e7dcaaee9293f3111417dc08bd6182e0578f1d5120139b07247e90b70546efe56349154be2bb8447abe46775d115d01c50cf6fea99b4c596897ca336ab943973cb37488f19f62b64adea2e53be54362df662112e22b96f6c5a88c268862c2b615", 0xd5}], 0x5, &(0x7f00000057c0), 0x0, 0x8008000}}], 0x8, 0x4002) (async) r26 = openat$ppp(0xffffffffffffff9c, &(0x7f0000005a00), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r26, 0xc004743e, &(0x7f0000005a40)) 16.565152ms ago: executing program 0 (id=1818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006000000956c0000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) unshare(0x2040400) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) 1.622735ms ago: executing program 2 (id=1819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) connect$can_j1939(r1, &(0x7f00000005c0)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x3}, 0xfd}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={r1, r2}) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) socket(0x28, 0x6, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000020006600000008000300", @ANYRES32=r5, @ANYBLOB="080026006c09000008009f00010000000800b700"], 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf25640000000c00990001000000620000002b12517bdca4850d7cf551f34539e53288e10590ecfa29b7916dfd8c84450c5f04499a0003277a6eba20a22d29f1c41d0c33168597091bcd517baa320a2c2578b9574425ab8e14c9d25bc68b90debda2fe3227621252d10170e55db9315224ac337915406067852210082b8b3b3c1659e5d5671d80736ea499689b580944940edc83b5f84fc9b4c23cdc143ad09e4798d2385ddeb9649c32b7ccad5fd3f6da2a630e0cb573f5c997c3ed982f55"], 0x20}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4040000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000003c0)="78f81266c7cdfe57d7b440726e0921cba7ac1cd1803a8802f670aa8da5ac5d1996d3d27feb1a4e35dc29711b895f78aa8c20daf6711e1c5eca94d7186e7eab1ef13b93950f959a9c592e53651d1529d33103402d3559e4b6a9c9a3a7f1e2c96becf32f62e8590af32c177c4d132adf72545a1ce80c82d671f6c419eb2ea3939bbb3b9b1fce13e3cfbf314287af2623e9d6759237a9860db640177ce3ed1e97cf046de04a07b4d19e6b41a4ef23320687eaf067d8e246d4452618da321df7dbbddfd52374b0ac0c3b0b66028597b7b2a9", 0xd0}, {&(0x7f00000002c0)}, {&(0x7f0000000300)}, {&(0x7f00000004c0)="1077084d1941068cdfffc809f8164515861ea4f5121b256b8ab6462262c2d313c05645e9b8adde110378d158cd7e9b2c8e82e33266f25ec66787851e3b9fc5cf73e9bba52d1184942baa2af3cccc3d2eec3edbf73d1529ed10540d4d480a0b75060d57097a4a62b442f90106f7ad560388cd83a4d8aa747b93abc1dad93613d210b3d1f72922bb5937d666350057b50ac001d9428d7ddccd1505f8eef7547083382d007546a085855f10678a350942e17e0f40d3c53555d392255b2816613be00047e5", 0xc3}, {&(0x7f0000000340)="d49aae2cda31262894b89eaabbf1be7b3fbb590d614a84", 0x17}, {&(0x7f0000000600)="c49d12c32a982d44eea096fa1ae93b025dc5c7cad7a81e5ab576140f1f09c8cd9a96cabb8486e6378c1cf8e40148951ef0bb6d7ca208ebbd9de66a99111622ef89bf46f80947898a678eb8ff88581762921f3341ecddaef5d6d3613504cd228db3765a1efa8f7019b9ce43d4bc8b7dfae1a8bb9e505bceb9f6097a3139dfd45143642b95e4f3fda2168dcc582cc45076c0607fc3965ad3b5cc722d047adab59885c327c867a9226d8efa728fd8300ec8138221db18f4c967750956a0be024e26b44da686a0a713af9f", 0xc9}, {&(0x7f0000000700)="3d2d319af553b75fedf02da560568285a794", 0x12}, {&(0x7f0000000740)="967ebe7fe42791662834f1c3b3ba6a336564fa51d348d8dadb613415ddd25e5b469c9dbb296832ebbcf5bb5577e7174512b03da39dec8860d7ac19d18bdf001b49f46b5e736459f5d44528f3eec9f9102146f0df6d5d5cc9c4c67ef1b888ad9bd3a88c13720d589ee8ed1e6aaf81649379e279ff90317af23f70ffd3cd7f303dc53c2b1ca9bc83184a840d413fd98890380e12d1a4ecdc5c729943782d4f8d71e9f5d4e057e8adb8bf1273477ff55b70e8593db10a5e88585d", 0xb9}], 0x8}, 0x20044014) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000380)={r8, 0x800, 0x6, "9100125f2023"}, 0xe) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x0, @private0, 0x2}}, 0x3, 0x4, 0x7ff, 0x2, 0xf830}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={r8, 0x9, 0x2d, 0x9c, 0x2, 0xe3, 0x401, 0x4, {r9, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x5}}, 0x10001, 0x9, 0x8d97, 0xff, 0xd15}}, &(0x7f0000000100)=0xb0) 0s ago: executing program 1 (id=917): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) (async) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) socket$inet(0x2, 0x3, 0x7f) (async) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) (async) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 232.947194][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1278'. [ 232.961129][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 233.320434][ T5836] Bluetooth: hci3: command tx timeout [ 233.352494][ T7817] team0 (unregistering): Port device team_slave_1 removed [ 233.391232][ T7817] team0 (unregistering): Port device team_slave_0 removed [ 233.992507][T10775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.021376][T10775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.055285][T10775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.192092][T10973] lo speed is unknown, defaulting to 1000 [ 234.205080][T10775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.228445][T10973] wg1 speed is unknown, defaulting to 1000 [ 234.263479][T10980] lo speed is unknown, defaulting to 1000 [ 234.279411][ T5836] Bluetooth: hci2: command tx timeout [ 234.368129][T10980] wg1 speed is unknown, defaulting to 1000 [ 234.449480][T10991] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1283'. [ 234.506867][T10981] netlink: 'syz.0.1281': attribute type 4 has an invalid length. [ 234.990511][T10796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.027724][T10796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.056773][T10796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.080309][T10775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.088093][T10796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.171584][T11009] netlink: 'syz.2.1287': attribute type 6 has an invalid length. [ 235.189970][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 235.285970][T10775] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.317611][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 235.356539][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.363751][ T6939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.403711][ T5836] Bluetooth: hci3: command tx timeout [ 235.467075][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 235.493917][T11011] netlink: 'syz.3.1286': attribute type 2 has an invalid length. [ 235.505951][T11011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1286'. [ 235.529195][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.536356][ T7818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.816030][T10796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.883638][T10796] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.955531][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.962766][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.005415][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.012641][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.306430][T10775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.518791][T10796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.664107][T10796] veth0_vlan: entered promiscuous mode [ 236.692934][T10796] veth1_vlan: entered promiscuous mode [ 236.725581][T11071] xt_ecn: cannot match TCP bits for non-tcp packets [ 236.771819][T10796] veth0_macvtap: entered promiscuous mode [ 236.808867][T10796] veth1_macvtap: entered promiscuous mode [ 236.921595][T10775] veth0_vlan: entered promiscuous mode [ 236.941859][T11077] __nla_validate_parse: 1 callbacks suppressed [ 236.941876][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'. [ 236.958131][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 237.011814][T10796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.021207][T11081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1300'. [ 237.048498][T10775] veth1_vlan: entered promiscuous mode [ 237.062344][T10796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.139054][ T3029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.179685][T10775] veth0_macvtap: entered promiscuous mode [ 237.196344][ T3029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.218534][ T3029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.269974][T11090] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 237.290868][ T3029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.315480][T11083] lo speed is unknown, defaulting to 1000 [ 237.344738][T11083] wg1 speed is unknown, defaulting to 1000 [ 237.350896][T10775] veth1_macvtap: entered promiscuous mode [ 237.385475][T11088] lo speed is unknown, defaulting to 1000 [ 237.430981][T10775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.462479][T11088] wg1 speed is unknown, defaulting to 1000 [ 237.585730][T10775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.625177][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.647886][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.668530][ T6932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.694051][ T6932] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.738175][ T6932] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.747426][ T7817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.929672][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1305'. [ 237.988390][ T7817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.996331][ T7817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.075896][ T30] audit: type=1800 audit(1751111338.205:5): pid=11106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1307" name=14 dev="tmpfs" ino=1527 res=0 errno=0 [ 238.132843][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.152989][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.241709][ T7817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.250345][T11108] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1308'. [ 238.257424][ T7817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.264612][T11108] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1308'. [ 238.317898][T11108] rdma_rxe: rxe_newlink: failed to add lo [ 238.377916][T11108] lo: entered allmulticast mode [ 238.408395][T11108] tunl0: entered allmulticast mode [ 238.431644][T11108] gre0: entered allmulticast mode [ 238.450301][T11108] gretap0: entered allmulticast mode [ 238.463253][T11108] erspan0: entered allmulticast mode [ 238.476053][T11108] ip_vti0: entered allmulticast mode [ 238.500079][T11108] ip6_vti0: entered allmulticast mode [ 238.527123][T11108] sit0: entered allmulticast mode [ 238.543896][T11108] ip6tnl0: entered allmulticast mode [ 238.559414][T11108] ip6gre0: entered allmulticast mode [ 238.572950][T11108] syz_tun: entered allmulticast mode [ 238.582289][T11108] ip6gretap0: entered allmulticast mode [ 238.593540][T11108] bond0: entered allmulticast mode [ 238.600021][T11108] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 238.609983][T11108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.619565][T11108] team0: entered allmulticast mode [ 238.625518][T11108] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.634151][T11108] dummy0: entered allmulticast mode [ 238.642897][T11108] nlmon0: entered allmulticast mode [ 238.650599][T11108] caif0: entered allmulticast mode [ 238.655726][T11108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.674422][ T43] lo speed is unknown, defaulting to 1000 [ 238.701206][ T43] syz2: Port: 1 Link ACTIVE [ 238.809808][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 239.034416][T11116] macsec1: entered promiscuous mode [ 239.041883][T11116] erspan0: entered promiscuous mode [ 239.047760][T11116] macsec1: entered allmulticast mode [ 239.053309][T11116] erspan0: entered allmulticast mode [ 239.069907][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1310'. [ 239.526764][ T7817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.611398][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'. [ 239.635130][T11127] lo speed is unknown, defaulting to 1000 [ 239.659436][T11127] wg1 speed is unknown, defaulting to 1000 [ 239.724689][ T7817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.799378][T11134] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 239.864213][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.874121][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.893865][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.903218][ T7817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.926456][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.936130][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.015174][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.024927][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.034257][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.043753][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.052696][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.072592][ T7817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.086169][T11141] lo speed is unknown, defaulting to 1000 [ 240.098583][T11141] wg1 speed is unknown, defaulting to 1000 [ 240.231018][T11143] lo speed is unknown, defaulting to 1000 [ 240.238320][T11145] lo speed is unknown, defaulting to 1000 [ 240.252656][T11143] wg1 speed is unknown, defaulting to 1000 [ 240.312798][T11153] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 240.342726][T11145] wg1 speed is unknown, defaulting to 1000 [ 240.404578][T11153] vlan3: entered promiscuous mode [ 240.409915][T11153] bond0: entered promiscuous mode [ 240.414977][T11153] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 240.534540][ T7817] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.590516][T11166] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 [ 240.653407][ T7817] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.865447][ T7817] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.916616][T11182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.087225][T11186] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1324'. [ 241.099595][ T7817] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.273037][T11206] netlink: 'syz.3.1327': attribute type 10 has an invalid length. [ 241.291627][T11143] chnl_net:caif_netlink_parms(): no params data found [ 241.355377][T11145] chnl_net:caif_netlink_parms(): no params data found [ 241.418065][T11210] lo speed is unknown, defaulting to 1000 [ 241.455187][T11210] wg1 speed is unknown, defaulting to 1000 [ 241.518337][ T7817] bridge_slave_1: left allmulticast mode [ 241.524738][ T7817] bridge_slave_1: left promiscuous mode [ 241.530949][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.541280][ T7817] bridge_slave_0: left allmulticast mode [ 241.547034][ T7817] bridge_slave_0: left promiscuous mode [ 241.553441][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.566136][ T7817] bridge_slave_1: left allmulticast mode [ 241.572002][ T7817] bridge_slave_1: left promiscuous mode [ 241.579644][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.590960][ T7817] bridge_slave_0: left allmulticast mode [ 241.596621][ T7817] bridge_slave_0: left promiscuous mode [ 241.602426][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.963700][ T5849] Bluetooth: hci2: command tx timeout [ 242.048278][ T7817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.066117][ T7817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.077709][ T7817] bond0 (unregistering): Released all slaves [ 242.085275][T11219] IPVS: set_ctl: invalid protocol: 219 100.1.1.2:20000 [ 242.117920][ T5849] Bluetooth: hci3: command tx timeout [ 242.203934][T11221] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0 [ 242.363941][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 242.474155][ T7817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.485214][ T7817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.495433][ T7817] bond0 (unregistering): Released all slaves [ 242.710894][T11213] lo speed is unknown, defaulting to 1000 [ 242.774322][T11143] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.783802][T11143] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.795154][T11143] bridge_slave_0: entered allmulticast mode [ 242.804900][T11143] bridge_slave_0: entered promiscuous mode [ 242.854571][T11213] wg1 speed is unknown, defaulting to 1000 [ 242.855092][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.872232][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.885078][T11145] bridge_slave_0: entered allmulticast mode [ 242.893533][T11145] bridge_slave_0: entered promiscuous mode [ 242.913120][T11143] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.920460][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.928913][T11143] bridge_slave_1: entered allmulticast mode [ 242.936770][T11143] bridge_slave_1: entered promiscuous mode [ 242.954166][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.963668][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.972191][T11145] bridge_slave_1: entered allmulticast mode [ 242.992020][T11145] bridge_slave_1: entered promiscuous mode [ 243.096174][T11143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.149932][T11143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.176104][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.190547][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.299386][T11143] team0: Port device team_slave_0 added [ 243.349264][T11145] team0: Port device team_slave_0 added [ 243.366477][T11143] team0: Port device team_slave_1 added [ 243.396900][T11145] team0: Port device team_slave_1 added [ 243.413102][T11246] lo speed is unknown, defaulting to 1000 [ 243.445833][T11246] wg1 speed is unknown, defaulting to 1000 [ 243.487111][T11145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.503406][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.532115][T11145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.563145][T11143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.584428][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.614659][T11143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.631282][ T7817] hsr_slave_0: left promiscuous mode [ 243.639732][ T7817] hsr_slave_1: left promiscuous mode [ 243.645705][ T7817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.653715][ T7817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.664762][ T7817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.672298][ T7817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.689174][ T7817] hsr_slave_0: left promiscuous mode [ 243.695136][ T7817] hsr_slave_1: left promiscuous mode [ 243.701984][ T7817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.709948][ T7817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.718858][ T7817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.726323][ T7817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.764134][ T7817] veth1_macvtap: left promiscuous mode [ 243.769970][ T7817] veth0_macvtap: left promiscuous mode [ 243.776716][ T7817] veth1_vlan: left promiscuous mode [ 243.782775][ T7817] veth0_vlan: left promiscuous mode [ 243.791845][ T7817] veth1_macvtap: left promiscuous mode [ 243.798008][ T7817] veth0_macvtap: left promiscuous mode [ 243.803639][ T7817] veth1_vlan: left promiscuous mode [ 243.809372][ T7817] veth0_vlan: left promiscuous mode [ 243.864362][T11245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.043425][ T5849] Bluetooth: hci2: command tx timeout [ 244.199005][ T5849] Bluetooth: hci3: command tx timeout [ 244.379075][ T7817] team0 (unregistering): Port device team_slave_1 removed [ 244.423467][ T7817] team0 (unregistering): Port device team_slave_0 removed [ 245.203709][ T7817] team0 (unregistering): Port device team_slave_1 removed [ 245.250444][ T7817] team0 (unregistering): Port device team_slave_0 removed [ 245.706170][T11145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.713619][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.740673][T11145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.882680][T11143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.895700][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.946212][T11143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.013458][ T5961] lo speed is unknown, defaulting to 1000 [ 246.026822][ T5961] syz2: Port: 1 Link DOWN [ 246.123226][ T5849] Bluetooth: hci2: command tx timeout [ 246.147108][T11143] hsr_slave_0: entered promiscuous mode [ 246.156430][T11143] hsr_slave_1: entered promiscuous mode [ 246.165149][T11143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.180844][T11143] Cannot create hsr debugfs directory [ 246.268488][T11145] hsr_slave_0: entered promiscuous mode [ 246.275448][T11145] hsr_slave_1: entered promiscuous mode [ 246.281830][ T5849] Bluetooth: hci3: command tx timeout [ 246.297029][T11145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.305123][T11145] Cannot create hsr debugfs directory [ 246.495609][T11265] netlink: 'syz.0.1341': attribute type 21 has an invalid length. [ 246.517886][T11265] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1341'. [ 246.650474][T11267] tipc: New replicast peer: 255.255.255.255 [ 246.656994][T11267] tipc: Enabled bearer , priority 10 [ 247.087115][T11277] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 247.120640][T11283] bridge_slave_0: left allmulticast mode [ 247.126338][T11283] bridge_slave_0: left promiscuous mode [ 247.148803][T11285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1347'. [ 247.164118][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.175230][T11287] netlink: 'syz.3.1346': attribute type 10 has an invalid length. [ 247.186184][T11283] bridge_slave_1: left allmulticast mode [ 247.207868][T11283] bridge_slave_1: left promiscuous mode [ 247.224088][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.278534][T11283] bond0: (slave bond_slave_0): Releasing backup interface [ 247.295842][T11283] bond0: (slave bond_slave_1): Releasing backup interface [ 247.304767][T11283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.318566][T11283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.339521][T11287] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.409824][T11298] netlink: 'syz.2.1350': attribute type 11 has an invalid length. [ 247.424365][T11298] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1350'. [ 247.462539][T11294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1348'. [ 247.478504][T11298] vlan0: entered promiscuous mode [ 247.525103][T11290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1348'. [ 247.611983][T11145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.663402][T11145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.743199][T11145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.771085][T11256] tipc: Node number set to 2785374056 [ 247.793919][T11307] lo speed is unknown, defaulting to 1000 [ 247.801253][T11145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.844341][T11307] wg1 speed is unknown, defaulting to 1000 [ 248.051850][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'. [ 248.213410][ T5849] Bluetooth: hci2: command tx timeout [ 248.281827][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 248.329809][T11334] netlink: 'syz.3.1359': attribute type 10 has an invalid length. [ 248.337990][T11143] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.359402][ T5849] Bluetooth: hci3: command tx timeout [ 248.374626][T11145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.421595][T11143] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.509930][T11143] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.521890][T11143] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.552509][T11145] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.612651][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.619860][ T6954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.675197][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.682353][ T6954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.816444][T11145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.934425][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'. [ 248.970791][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.040801][T11143] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.122501][T11143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.136948][T11143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.180785][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.188013][ T7817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.214312][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.221549][ T7817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.351773][T11376] lo speed is unknown, defaulting to 1000 [ 249.384154][T11376] wg1 speed is unknown, defaulting to 1000 [ 249.541554][T11145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.596608][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.728530][T11395] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1371'. [ 249.769715][T11395] netlink: 'syz.3.1371': attribute type 1 has an invalid length. [ 249.913738][T11145] veth0_vlan: entered promiscuous mode [ 249.941871][T11145] veth1_vlan: entered promiscuous mode [ 250.053814][T11145] veth0_macvtap: entered promiscuous mode [ 250.084122][T11145] veth1_macvtap: entered promiscuous mode [ 250.129065][T11145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.154334][T11145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.191329][ T6932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.210664][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 250.220550][ T6932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.263215][ T6932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.290346][ T6932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.496083][T11143] veth0_vlan: entered promiscuous mode [ 250.519652][ T6932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.540783][ T6932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.635428][T11143] veth1_vlan: entered promiscuous mode [ 250.649760][ T6932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.660258][ T6932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.779896][T11143] veth0_macvtap: entered promiscuous mode [ 250.808786][T11143] veth1_macvtap: entered promiscuous mode [ 250.955358][T11143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.985701][T11143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.051040][T11434] lo speed is unknown, defaulting to 1000 [ 251.072666][ T6932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.094607][ T6932] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.105928][ T6932] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.133911][ T6932] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.136648][T11434] wg1 speed is unknown, defaulting to 1000 [ 251.154437][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 251.303515][ T7817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.325894][ T7817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.378146][T11454] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 251.412721][T11454] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1386'. [ 251.453081][ T6932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.500790][ T6939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.520555][ T6939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.600075][ T6932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.704631][ T6932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.896146][ T6932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.003994][ T6932] bridge_slave_1: left allmulticast mode [ 252.010021][ T6932] bridge_slave_1: left promiscuous mode [ 252.015728][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.024909][ T6932] bridge_slave_0: left allmulticast mode [ 252.031028][ T6932] bridge_slave_0: left promiscuous mode [ 252.036728][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.432427][T11461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1389'. [ 252.434433][T11460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 252.861922][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.873284][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.887712][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.898738][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.906428][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.090630][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 253.168276][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.189643][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.199271][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.214795][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.223520][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.258045][ T6932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.342021][ T6932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.353792][ T6932] bond0 (unregistering): Released all slaves [ 253.582719][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 253.597235][T11485] lo speed is unknown, defaulting to 1000 [ 253.621939][T11476] lo speed is unknown, defaulting to 1000 [ 253.733076][T11485] wg1 speed is unknown, defaulting to 1000 [ 253.772243][T11476] wg1 speed is unknown, defaulting to 1000 [ 253.941739][T11507] x_tables: duplicate underflow at hook 1 [ 253.974377][ T6932] hsr_slave_0: left promiscuous mode [ 254.002048][ T6932] hsr_slave_1: left promiscuous mode [ 254.012450][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.020786][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.028795][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.036387][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.072912][ T6932] veth1_macvtap: left promiscuous mode [ 254.079159][ T6932] veth0_macvtap: left promiscuous mode [ 254.085005][ T6932] veth1_vlan: left promiscuous mode [ 254.090699][ T6932] veth0_vlan: left promiscuous mode [ 254.595759][ T6932] team0 (unregistering): Port device team_slave_1 removed [ 254.641603][ T6932] team0 (unregistering): Port device team_slave_0 removed [ 255.001115][ T5836] Bluetooth: hci2: command tx timeout [ 255.194761][T11511] lo speed is unknown, defaulting to 1000 [ 255.239101][T11524] dvmrp1: entered allmulticast mode [ 255.262730][T11511] wg1 speed is unknown, defaulting to 1000 [ 255.321031][ T5836] Bluetooth: hci3: command tx timeout [ 255.491628][T11526] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.1403'. [ 255.712833][T11536] lo speed is unknown, defaulting to 1000 [ 255.744674][T11485] chnl_net:caif_netlink_parms(): no params data found [ 255.766215][T11526] lo speed is unknown, defaulting to 1000 [ 255.774605][T11476] chnl_net:caif_netlink_parms(): no params data found [ 255.784157][T11536] wg1 speed is unknown, defaulting to 1000 [ 255.831164][T11526] wg1 speed is unknown, defaulting to 1000 [ 255.953559][ T6932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.133080][ T6932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.148371][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.155536][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.163466][T11485] bridge_slave_0: entered allmulticast mode [ 256.171609][T11485] bridge_slave_0: entered promiscuous mode [ 256.183113][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.191038][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.198768][T11476] bridge_slave_0: entered allmulticast mode [ 256.205825][T11476] bridge_slave_0: entered promiscuous mode [ 256.241760][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.249951][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.260135][T11485] bridge_slave_1: entered allmulticast mode [ 256.268377][T11485] bridge_slave_1: entered promiscuous mode [ 256.283030][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.290258][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.297629][T11476] bridge_slave_1: entered allmulticast mode [ 256.304636][T11476] bridge_slave_1: entered promiscuous mode [ 256.341704][ T6932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.451274][ T6932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.466779][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.480401][T11476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.496482][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.526805][T11476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.586373][T11485] team0: Port device team_slave_0 added [ 256.595098][T11485] team0: Port device team_slave_1 added [ 256.620318][T11476] team0: Port device team_slave_0 added [ 256.666524][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'. [ 256.676240][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'. [ 256.691609][T11476] team0: Port device team_slave_1 added [ 256.728553][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.740993][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.768423][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.851568][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.866430][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.894327][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.910138][T11476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.918600][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.923592][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 256.945775][T11476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.966994][T11476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.974269][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.001654][T11476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.082297][ T5836] Bluetooth: hci2: command tx timeout [ 257.230140][T11485] hsr_slave_0: entered promiscuous mode [ 257.236710][T11485] hsr_slave_1: entered promiscuous mode [ 257.248349][T11485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.256022][T11485] Cannot create hsr debugfs directory [ 257.292520][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1410'. [ 257.361055][ T6932] bridge_slave_1: left allmulticast mode [ 257.366746][ T6932] bridge_slave_1: left promiscuous mode [ 257.373339][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.384051][ T6932] bridge_slave_0: left allmulticast mode [ 257.384751][T11558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1409'. [ 257.389778][ T6932] bridge_slave_0: left promiscuous mode [ 257.390066][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.401065][ T5836] Bluetooth: hci3: command tx timeout [ 257.813871][ T6932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.827720][ T6932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.840341][ T6932] bond0 (unregistering): Released all slaves [ 257.948677][T11476] hsr_slave_0: entered promiscuous mode [ 257.960232][T11476] hsr_slave_1: entered promiscuous mode [ 257.984505][T11476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.994507][T11476] Cannot create hsr debugfs directory [ 258.032891][T11561] lo speed is unknown, defaulting to 1000 [ 258.045799][T11568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1412'. [ 258.069768][T11561] wg1 speed is unknown, defaulting to 1000 [ 258.638257][ T6932] hsr_slave_0: left promiscuous mode [ 258.644460][ T6932] hsr_slave_1: left promiscuous mode [ 258.658370][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.665841][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.689203][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.696673][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.741481][ T6932] veth1_macvtap: left promiscuous mode [ 258.747064][ T6932] veth0_macvtap: left promiscuous mode [ 258.757506][ T6932] veth1_vlan: left promiscuous mode [ 258.762904][ T6932] veth0_vlan: left promiscuous mode [ 259.158678][ T5836] Bluetooth: hci2: command tx timeout [ 259.477534][ T5836] Bluetooth: hci3: command tx timeout [ 259.686219][ T6932] team0 (unregistering): Port device team_slave_1 removed [ 259.726419][ T6932] team0 (unregistering): Port device team_slave_0 removed [ 260.200401][T11585] kthread_run failed with err -4 [ 260.401896][T11590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1418'. [ 260.411248][T11590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1418'. [ 260.420484][T11590] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 260.619240][T11594] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 260.795980][T11599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.238412][ T5836] Bluetooth: hci2: command tx timeout [ 261.249963][T11609] C: renamed from team_slave_0 [ 261.259537][T11609] netlink: 'syz.0.1423': attribute type 3 has an invalid length. [ 261.268812][T11609] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1423'. [ 261.391108][T11616] netlink: 'syz.2.1427': attribute type 5 has an invalid length. [ 261.458454][T11618] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1428'. [ 261.542053][T11621] netlink: 'syz.2.1428': attribute type 10 has an invalid length. [ 261.557652][ T5836] Bluetooth: hci3: command tx timeout [ 261.564416][T11621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1428'. [ 261.589867][T11621] dummy0: entered promiscuous mode [ 261.600384][T11621] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 261.633779][T11623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1429'. [ 261.663272][T11485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.689375][T11485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.712531][T11485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.758100][T11485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.977539][T11649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1431'. [ 262.004058][T11649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1431'. [ 262.004234][T11476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.058485][T11476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.093724][T11476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.155955][T11476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.338450][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.619287][T11485] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.633244][T11665] 8021q: VLANs not supported on bond0 [ 262.663136][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.670333][ T6939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.748121][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.755333][ T6939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.828625][T11476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.912713][T11485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.942147][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1435'. [ 262.992407][T11476] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.093204][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.100736][ T6939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.142258][T11676] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 263.189065][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.196277][ T7817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.210939][T11685] __nla_validate_parse: 2 callbacks suppressed [ 263.210959][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1438'. [ 263.420382][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 263.464044][T11691] veth0: entered promiscuous mode [ 263.596463][T11695] veth0 (unregistering): left promiscuous mode [ 263.849520][T11687] lo speed is unknown, defaulting to 1000 [ 263.857128][T11687] wg1 speed is unknown, defaulting to 1000 [ 263.857231][T11692] lo speed is unknown, defaulting to 1000 [ 263.894076][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.026569][T11692] wg1 speed is unknown, defaulting to 1000 [ 264.553442][T11476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.681078][T11476] veth0_vlan: entered promiscuous mode [ 264.705299][T11476] veth1_vlan: entered promiscuous mode [ 264.820666][T11476] veth0_macvtap: entered promiscuous mode [ 264.863190][T11476] veth1_macvtap: entered promiscuous mode [ 264.880412][T11736] netlink: 'syz.0.1445': attribute type 21 has an invalid length. [ 264.897392][T11736] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1445'. [ 264.914157][T11485] veth0_vlan: entered promiscuous mode [ 264.934190][T11736] netlink: 'syz.0.1445': attribute type 5 has an invalid length. [ 264.956455][T11736] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1445'. [ 264.967407][T11740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'. [ 264.976487][T11739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'. [ 264.985562][T11740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'. [ 264.995776][T11739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'. [ 265.016777][T11476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.080514][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 265.120775][T11746] vlan3: entered promiscuous mode [ 265.125856][T11746] syz_tun: entered promiscuous mode [ 265.205939][T11476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.216549][T11485] veth1_vlan: entered promiscuous mode [ 265.270060][ T6952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.288285][ T6952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.361324][ T6952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.381351][ T6952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.490987][T11485] veth0_macvtap: entered promiscuous mode [ 265.532041][T11485] veth1_macvtap: entered promiscuous mode [ 265.611344][T11485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.625432][T11485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.725410][T11770] lo speed is unknown, defaulting to 1000 [ 265.734792][T11770] wg1 speed is unknown, defaulting to 1000 [ 265.801272][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 265.826117][T11772] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 265.868655][T11772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.896215][ T7818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.937492][ T7818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.946488][ T6952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.960981][ T6952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.021065][ T6952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.035430][ T6952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.148094][ T6952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.156393][ T6952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.436957][ T6952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.445970][ T6952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.510229][T11781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 266.800434][ T7818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.824354][ T7818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.833169][T11790] netlink: zone id is out of range [ 266.839391][T11790] netlink: zone id is out of range [ 266.844630][T11790] netlink: zone id is out of range [ 266.855207][T11790] netlink: zone id is out of range [ 266.879697][T11790] netlink: zone id is out of range [ 266.902508][T11790] netlink: zone id is out of range [ 266.911599][T11790] netlink: zone id is out of range [ 266.916822][T11790] netlink: zone id is out of range [ 267.204811][ T6952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.363029][ T6952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.503763][ T6952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.780032][ T6952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.022821][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.032578][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.046760][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.069455][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.077784][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.117110][T11827] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 268.142687][ T6952] bridge_slave_1: left allmulticast mode [ 268.167570][T11827] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 268.175394][ T6952] bridge_slave_1: left promiscuous mode [ 268.198016][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.228787][ T6952] bridge_slave_0: left allmulticast mode [ 268.234478][ T6952] bridge_slave_0: left promiscuous mode [ 268.257196][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.284316][T11829] __nla_validate_parse: 4 callbacks suppressed [ 268.284334][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 268.317736][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'. [ 268.638369][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.653668][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.664727][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.674148][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.689137][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.786464][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1475'. [ 269.054973][ T6952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.066109][ T6952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.076471][ T6952] bond0 (unregistering): Released all slaves [ 269.093619][T11834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1473'. [ 269.148606][T11822] lo speed is unknown, defaulting to 1000 [ 269.156145][T11822] wg1 speed is unknown, defaulting to 1000 [ 269.194847][T11842] lo speed is unknown, defaulting to 1000 [ 269.222819][T11842] wg1 speed is unknown, defaulting to 1000 [ 269.245224][T11854] Cannot find add_set index 2 as target [ 269.707158][T11880] macsec2: entered promiscuous mode [ 269.717417][T11880] ip6gretap0: entered promiscuous mode [ 269.727054][T11880] macsec2: entered allmulticast mode [ 269.734119][T11880] ip6gretap0: entered allmulticast mode [ 269.759123][T11880] ip6gretap0: left allmulticast mode [ 269.765617][T11880] ip6gretap0: left promiscuous mode [ 269.943608][ T6952] hsr_slave_0: left promiscuous mode [ 269.969491][ T6952] hsr_slave_1: left promiscuous mode [ 269.975955][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.984206][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.993360][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.000988][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.041666][ T6952] veth1_macvtap: left promiscuous mode [ 270.048985][ T6952] veth0_macvtap: left promiscuous mode [ 270.055557][ T6952] veth1_vlan: left promiscuous mode [ 270.063478][ T6952] veth0_vlan: left promiscuous mode [ 270.121921][ T5836] Bluetooth: hci2: command tx timeout [ 270.271946][T11894] netlink: 'syz.3.1487': attribute type 5 has an invalid length. [ 270.280269][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 270.463222][T11903] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1489'. [ 270.475636][T11904] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1489'. [ 270.684238][ T6952] team0 (unregistering): Port device team_slave_1 removed [ 270.728475][ T6952] team0 (unregistering): Port device team_slave_0 removed [ 270.759521][ T5836] Bluetooth: hci3: command tx timeout [ 271.181654][T11892] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1488'. [ 271.201873][T11822] chnl_net:caif_netlink_parms(): no params data found [ 271.208838][T11899] netlink: 'syz.3.1487': attribute type 2 has an invalid length. [ 271.582265][T11842] chnl_net:caif_netlink_parms(): no params data found [ 271.616946][T11822] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.625303][T11822] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.647687][T11822] bridge_slave_0: entered allmulticast mode [ 271.655483][T11822] bridge_slave_0: entered promiscuous mode [ 271.700207][T11937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1496'. [ 271.749678][T11941] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 271.793153][T11822] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.808290][T11822] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.824080][T11822] bridge_slave_1: entered allmulticast mode [ 271.835198][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 271.847408][T11822] bridge_slave_1: entered promiscuous mode [ 272.120138][T11953] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 272.212799][ T5836] Bluetooth: hci2: command tx timeout [ 272.315938][T11822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.360255][T11822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.418866][T11937] lo speed is unknown, defaulting to 1000 [ 272.449410][T11953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.546280][T11937] wg1 speed is unknown, defaulting to 1000 [ 272.548734][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.564871][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.573496][T11842] bridge_slave_0: entered allmulticast mode [ 272.584174][T11842] bridge_slave_0: entered promiscuous mode [ 272.614690][T11822] team0: Port device team_slave_0 added [ 272.629745][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.649655][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.662428][T11842] bridge_slave_1: entered allmulticast mode [ 272.671163][T11842] bridge_slave_1: entered promiscuous mode [ 272.686712][T11822] team0: Port device team_slave_1 added [ 272.837728][ T5836] Bluetooth: hci3: command tx timeout [ 272.862179][T11822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.873262][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.900336][T11822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.916437][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.945511][T11822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.953662][T11822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.980989][T11822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.995001][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.095675][ T6952] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.164332][T11842] team0: Port device team_slave_0 added [ 273.176017][T11842] team0: Port device team_slave_1 added [ 273.212124][ T6952] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.292191][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.299641][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.325939][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.340220][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.347509][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.373896][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.390880][T11822] hsr_slave_0: entered promiscuous mode [ 273.397144][T11822] hsr_slave_1: entered promiscuous mode [ 273.404349][T11822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.411988][T11822] Cannot create hsr debugfs directory [ 273.468289][ T6952] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.469958][T11981] ip6t_srh: unknown srh invflags 4000 [ 273.491453][T11982] ip6t_srh: unknown srh invflags 4000 [ 273.595993][ T6952] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.684899][T11842] hsr_slave_0: entered promiscuous mode [ 273.696523][T11842] hsr_slave_1: entered promiscuous mode [ 273.703152][T11842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.714689][T11842] Cannot create hsr debugfs directory [ 273.960817][T11990] __nla_validate_parse: 2 callbacks suppressed [ 273.960837][T11990] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1507'. [ 274.141155][ T6952] bridge_slave_1: left allmulticast mode [ 274.158427][ T6952] bridge_slave_1: left promiscuous mode [ 274.164319][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.183389][ T6952] bridge_slave_0: left allmulticast mode [ 274.189865][ T6952] bridge_slave_0: left promiscuous mode [ 274.195720][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.277554][ T5836] Bluetooth: hci2: command tx timeout [ 274.862115][ T6952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.873352][ T6952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.884216][ T6952] bond0 (unregistering): Released all slaves [ 274.917732][ T5836] Bluetooth: hci3: command tx timeout [ 274.925344][T11998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1510'. [ 274.937882][T11998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1510'. [ 274.959113][T11998] net_ratelimit: 71 callbacks suppressed [ 274.959135][T11998] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 274.986528][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1511'. [ 275.022199][T12000] bond0: (slave bond_slave_0): Releasing backup interface [ 275.045808][T12000] bond0: (slave bond_slave_1): Releasing backup interface [ 275.078352][T12000] team0: Port device C removed [ 275.084595][T12000] team0: Port device team_slave_1 removed [ 275.103146][T12000] team0: Port device macvlan0 removed [ 275.118796][T12000] bond1: (slave gretap1): Releasing active interface [ 275.141270][T12000] bond2: (slave ip6gre1): Releasing backup interface [ 275.148821][T12000] ip6gre1: left promiscuous mode [ 275.179203][T12008] batman_adv: batadv0: Adding interface: macvlan2 [ 275.195081][T12008] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.222498][T12008] batman_adv: batadv0: Interface activated: macvlan2 [ 275.380090][T12015] lo speed is unknown, defaulting to 1000 [ 275.451033][T12015] wg1 speed is unknown, defaulting to 1000 [ 275.582034][ T6952] hsr_slave_0: left promiscuous mode [ 275.593420][ T6952] hsr_slave_1: left promiscuous mode [ 275.602428][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.619224][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.628565][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.636117][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.659078][ T6952] veth1_macvtap: left promiscuous mode [ 275.664704][ T6952] veth0_macvtap: left promiscuous mode [ 275.670387][ T6952] veth1_vlan: left promiscuous mode [ 275.675711][ T6952] veth0_vlan: left promiscuous mode [ 276.155373][ T6952] team0 (unregistering): Port device team_slave_1 removed [ 276.199039][ T6952] team0 (unregistering): Port device team_slave_0 removed [ 276.358285][ T5836] Bluetooth: hci2: command tx timeout [ 276.791968][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 277.005189][ T5836] Bluetooth: hci3: command tx timeout [ 277.088323][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1522'. [ 277.204350][T12048] syz.3.1521: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 277.245145][T12048] CPU: 0 UID: 0 PID: 12048 Comm: syz.3.1521 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 277.245177][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.245190][T12048] Call Trace: [ 277.245198][T12048] [ 277.245207][T12048] dump_stack_lvl+0x189/0x250 [ 277.245256][T12048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.245282][T12048] ? __pfx__printk+0x10/0x10 [ 277.245303][T12048] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 277.245324][T12048] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 277.245346][T12048] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 277.245369][T12048] warn_alloc+0x214/0x310 [ 277.245389][T12048] ? stack_depot_save_flags+0x40/0x900 [ 277.245415][T12048] ? __pfx_warn_alloc+0x10/0x10 [ 277.245437][T12048] ? kasan_save_track+0x4f/0x80 [ 277.245463][T12048] ? xskq_create+0x56/0x170 [ 277.245480][T12048] ? xsk_init_queue+0xb0/0x110 [ 277.245496][T12048] ? xsk_setsockopt+0x43f/0x710 [ 277.245511][T12048] ? do_sock_setsockopt+0x25a/0x3e0 [ 277.245532][T12048] ? __x64_sys_setsockopt+0x18b/0x220 [ 277.245553][T12048] ? do_syscall_64+0xfa/0x3b0 [ 277.245572][T12048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.245598][T12048] __vmalloc_node_range_noprof+0x125/0x12f0 [ 277.245652][T12048] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 277.245679][T12048] ? __kasan_kmalloc+0x93/0xb0 [ 277.245700][T12048] vmalloc_user_noprof+0xad/0xf0 [ 277.245720][T12048] ? xskq_create+0xbf/0x170 [ 277.245740][T12048] xskq_create+0xbf/0x170 [ 277.245763][T12048] xsk_init_queue+0xb0/0x110 [ 277.245784][T12048] xsk_setsockopt+0x43f/0x710 [ 277.245805][T12048] ? __pfx_xsk_setsockopt+0x10/0x10 [ 277.245821][T12048] ? __lock_acquire+0xab9/0xd20 [ 277.245856][T12048] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 277.245877][T12048] ? __pfx_xsk_setsockopt+0x10/0x10 [ 277.245897][T12048] do_sock_setsockopt+0x25a/0x3e0 [ 277.245924][T12048] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 277.245960][T12048] ? __fget_files+0x2a/0x420 [ 277.245989][T12048] __x64_sys_setsockopt+0x18b/0x220 [ 277.246020][T12048] do_syscall_64+0xfa/0x3b0 [ 277.246039][T12048] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.246059][T12048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.246076][T12048] ? clear_bhb_loop+0x60/0xb0 [ 277.246099][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.246116][T12048] RIP: 0033:0x7faaaaf8e929 [ 277.246140][T12048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.246156][T12048] RSP: 002b:00007faaabe8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 277.246176][T12048] RAX: ffffffffffffffda RBX: 00007faaab1b6080 RCX: 00007faaaaf8e929 [ 277.246190][T12048] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 277.246201][T12048] RBP: 00007faaab010b39 R08: 0000000000000004 R09: 0000000000000000 [ 277.246212][T12048] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.246224][T12048] R13: 0000000000000000 R14: 00007faaab1b6080 R15: 00007ffd4b2c28e8 [ 277.246256][T12048] [ 277.246264][T12048] Mem-Info: [ 277.562838][T12048] active_anon:5367 inactive_anon:0 isolated_anon:0 [ 277.562838][T12048] active_file:1964 inactive_file:39958 isolated_file:0 [ 277.562838][T12048] unevictable:768 dirty:177 writeback:0 [ 277.562838][T12048] slab_reclaimable:11954 slab_unreclaimable:106555 [ 277.562838][T12048] mapped:31477 shmem:1488 pagetables:865 [ 277.562838][T12048] sec_pagetables:0 bounce:0 [ 277.562838][T12048] kernel_misc_reclaimable:0 [ 277.562838][T12048] free:1314290 free_pcp:19235 free_cma:0 [ 277.608601][T12048] Node 0 active_anon:21468kB inactive_anon:0kB active_file:7856kB inactive_file:159632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125908kB dirty:708kB writeback:0kB shmem:4416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12276kB pagetables:3320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 277.642304][T12048] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 277.740295][T12048] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.795406][T12048] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 277.813245][T11842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.820219][T12048] Node 0 DMA32 free:1337476kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21224kB inactive_anon:0kB active_file:7856kB inactive_file:157800kB unevictable:1536kB writepending:704kB present:3129332kB managed:2560932kB mlocked:0kB bounce:0kB free_pcp:59496kB local_pcp:39032kB free_cma:0kB [ 277.857084][T12048] lowmem_reserve[]: 0 0 1 1 1 [ 277.866179][T11842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.879545][T11842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.886697][T12048] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 277.918852][T12048] lowmem_reserve[]: 0 0 0 0 0 [ 277.923624][T12048] Node 1 Normal free:3904200kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17260kB local_pcp:11772kB free_cma:0kB [ 277.955701][T12048] lowmem_reserve[]: 0 0 0 0 0 [ 277.961956][T12048] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.979510][T11842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.997541][T12048] Node 0 DMA32: 1222*4kB (UM) 568*8kB (UME) 298*16kB (UME) 780*32kB (UM) 814*64kB (UME) 199*128kB (UM) 90*256kB (UM) 44*512kB (UME) 11*1024kB (UM) 4*2048kB (UME) 283*4096kB (M) = 1340920kB [ 278.019107][T12048] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 278.037563][T12048] Node 1 Normal: 112*4kB (UE) 51*8kB (UME) 33*16kB (UME) 93*32kB (UME) 35*64kB (UME) 10*128kB (UME) 4*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 949*4096kB (M) = 3904200kB [ 278.057970][T12048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.067726][T12048] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.077128][T12048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.098109][T12048] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.136843][T11822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.144294][T12048] 43408 total pagecache pages [ 278.152518][T12071] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1526'. [ 278.155137][T12048] 0 pages in swap cache [ 278.166441][T12048] Free swap = 124996kB [ 278.195889][T11822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.240817][T11822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.280786][T11822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.292960][T12048] Total swap = 124996kB [ 278.312617][T12048] 2097051 pages RAM [ 278.321254][T12083] netlink: 'syz.0.1529': attribute type 5 has an invalid length. [ 278.345101][T12048] 0 pages HighMem/MovableOnly [ 278.354456][T12048] 424712 pages reserved [ 278.360208][T12048] 0 pages cma reserved [ 278.376059][T12083] ip6erspan0: entered allmulticast mode [ 278.418773][T12086] tipc: New replicast peer: 255.255.255.255 [ 278.427057][T12086] tipc: Enabled bearer , priority 10 [ 278.453000][T11842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.536572][T11842] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.576039][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.583255][ T6954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.608398][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.615672][ T6932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.664013][T12106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1533'. [ 278.676246][T12106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1533'. [ 278.689138][T12106] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 278.801514][T11822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.944517][T11822] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.997106][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.004382][ T7818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.074373][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.081640][ T7818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.413839][T12131] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 279.572685][T11842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.631810][T12141] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1540'. [ 279.725017][T11822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.801387][T12147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1542'. [ 279.841599][T11822] veth0_vlan: entered promiscuous mode [ 279.866810][T11822] veth1_vlan: entered promiscuous mode [ 279.926647][T12150] xt_hashlimit: size too large, truncated to 1048576 [ 279.926650][T12152] xt_hashlimit: size too large, truncated to 1048576 [ 279.988844][T11822] veth0_macvtap: entered promiscuous mode [ 280.021474][T11822] veth1_macvtap: entered promiscuous mode [ 280.050935][T12159] IPVS: Error connecting to the multicast addr [ 280.081638][T11822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.174963][T11822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.206064][ T6950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.231066][ T6954] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.244508][ T6954] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.281982][ T6954] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.375310][T11842] veth0_vlan: entered promiscuous mode [ 280.474114][T11842] veth1_vlan: entered promiscuous mode [ 280.586732][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.619919][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.692222][T11842] veth0_macvtap: entered promiscuous mode [ 280.716303][T12174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1547'. [ 280.779663][T11842] veth1_macvtap: entered promiscuous mode [ 280.798110][ T6954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.806082][ T6954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.899647][T11842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.964756][T11842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.003516][T12186] lo speed is unknown, defaulting to 1000 [ 281.011773][T12186] wg1 speed is unknown, defaulting to 1000 [ 281.020902][ T6950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.062898][ T6950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.134083][ T6950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.174343][ T6950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.215003][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 281.764529][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 281.813823][ T6946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.837123][ T6946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.874815][T12220] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1558'. [ 281.905278][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.927452][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.061594][ T6950] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.169591][ T6950] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.440933][ T6950] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.504131][ T6950] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.646711][ T6950] bridge_slave_1: left allmulticast mode [ 282.667708][ T6950] bridge_slave_1: left promiscuous mode [ 282.673536][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.695025][ T6950] bridge_slave_0: left allmulticast mode [ 282.701349][ T6950] bridge_slave_0: left promiscuous mode [ 282.708420][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.934766][T12233] netlink: 'syz.0.1559': attribute type 39 has an invalid length. [ 283.135460][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.156187][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.175019][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.192773][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.211615][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.291054][ T6950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.302110][ T6950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.313628][ T6950] bond0 (unregistering): Released all slaves [ 283.618328][T12242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.619034][T12234] lo speed is unknown, defaulting to 1000 [ 283.722129][T12234] wg1 speed is unknown, defaulting to 1000 [ 283.841603][ T6950] hsr_slave_0: left promiscuous mode [ 283.848524][ T6950] hsr_slave_1: left promiscuous mode [ 283.854675][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.873884][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.901536][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.918060][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.922005][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.942178][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.952815][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.963345][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.973113][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.974841][ T6950] veth1_macvtap: left promiscuous mode [ 283.993938][ T6950] veth0_macvtap: left promiscuous mode [ 284.024532][ T6950] veth1_vlan: left promiscuous mode [ 284.031442][ T6950] veth0_vlan: left promiscuous mode [ 284.583974][ T6950] team0 (unregistering): Port device team_slave_1 removed [ 284.625612][ T6950] team0 (unregistering): Port device team_slave_0 removed [ 285.164547][T12261] lo speed is unknown, defaulting to 1000 [ 285.235119][T12252] lo speed is unknown, defaulting to 1000 [ 285.237328][T12261] wg1 speed is unknown, defaulting to 1000 [ 285.293264][T12252] wg1 speed is unknown, defaulting to 1000 [ 285.317490][ T5836] Bluetooth: hci2: command tx timeout [ 285.541943][T12234] chnl_net:caif_netlink_parms(): no params data found [ 285.819333][T12287] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1578'. [ 285.841616][T12287] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1578'. [ 285.925762][ T6950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.037875][ T5836] Bluetooth: hci3: command tx timeout [ 286.083426][ T6950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.103628][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.117447][T12234] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.125428][T12234] bridge_slave_0: entered allmulticast mode [ 286.139001][T12234] bridge_slave_0: entered promiscuous mode [ 286.159083][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.166289][T12234] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.185799][T12234] bridge_slave_1: entered allmulticast mode [ 286.193864][T12234] bridge_slave_1: entered promiscuous mode [ 286.277185][ T6950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.307184][T12252] chnl_net:caif_netlink_parms(): no params data found [ 286.392057][ T6950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.421288][T12234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.444695][T12234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.606182][T12234] team0: Port device team_slave_0 added [ 286.649286][T12234] team0: Port device team_slave_1 added [ 286.825282][T12234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.836024][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.865608][T12234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.931680][T12234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.951715][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.987157][T12234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.030673][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 287.044646][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 287.053910][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 287.067991][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 287.077038][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 287.087521][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 287.096813][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 287.106212][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 287.119450][T12327] macvlan0: left allmulticast mode [ 287.125461][T12327] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 287.133354][T12327] gretap1: left promiscuous mode [ 287.138550][T12327] bond2: left promiscuous mode [ 287.143798][T12327] veth5: left promiscuous mode [ 287.149292][T12327] macvtap1: left promiscuous mode [ 287.154329][T12327] macvtap1: left allmulticast mode [ 287.161239][T12327] ip6erspan0: left allmulticast mode [ 287.174733][T12252] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.182350][T12252] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.189725][T12252] bridge_slave_0: entered allmulticast mode [ 287.198539][T12252] bridge_slave_0: entered promiscuous mode [ 287.218506][T12252] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.225935][T12252] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.233344][T12252] bridge_slave_1: entered allmulticast mode [ 287.243419][T12252] bridge_slave_1: entered promiscuous mode [ 287.398079][ T5836] Bluetooth: hci2: command tx timeout [ 287.432256][T12343] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 287.532761][ T6950] bridge_slave_1: left allmulticast mode [ 287.563372][ T6950] bridge_slave_1: left promiscuous mode [ 287.574429][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.585291][ T6950] bridge_slave_0: left allmulticast mode [ 287.595535][ T6950] bridge_slave_0: left promiscuous mode [ 287.603620][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.983862][ T6950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.995187][ T6950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.006672][ T6950] bond0 (unregistering): Released all slaves [ 288.021683][T12252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.036971][T12234] hsr_slave_0: entered promiscuous mode [ 288.045565][T12234] hsr_slave_1: entered promiscuous mode [ 288.054562][T12234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.062462][T12234] Cannot create hsr debugfs directory [ 288.093417][T12349] macsec1: entered allmulticast mode [ 288.099417][T12349] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 288.112639][T12349] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 288.122160][ T5836] Bluetooth: hci3: command tx timeout [ 288.173263][T12252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.334102][T12359] netlink: 'syz.0.1595': attribute type 1 has an invalid length. [ 288.450314][T12252] team0: Port device team_slave_0 added [ 288.467146][T12363] bond4: (slave gretap2): making interface the new active one [ 288.481395][T12363] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 288.632631][T12252] team0: Port device team_slave_1 added [ 288.779952][T12252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.789478][T12252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.816027][T12252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.873107][T12382] gtp1: entered allmulticast mode [ 288.890612][T12382] team0: Port device gtp1 added [ 288.906562][T12252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.927318][T12252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.980671][T12252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.034570][ T6950] hsr_slave_0: left promiscuous mode [ 289.045698][ T6950] hsr_slave_1: left promiscuous mode [ 289.052935][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.065257][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.074921][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.083364][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.107336][ T6950] veth1_macvtap: left promiscuous mode [ 289.112919][ T6950] veth0_macvtap: left promiscuous mode [ 289.118924][ T6950] veth1_vlan: left promiscuous mode [ 289.124269][ T6950] veth0_vlan: left promiscuous mode [ 289.478850][ T5836] Bluetooth: hci2: command tx timeout [ 289.625395][T12398] netlink: 'syz.3.1604': attribute type 1 has an invalid length. [ 289.753774][ T6950] team0 (unregistering): Port device team_slave_1 removed [ 289.795395][ T6950] team0 (unregistering): Port device team_slave_0 removed [ 290.199625][ T5836] Bluetooth: hci3: command tx timeout [ 290.301647][T12252] hsr_slave_0: entered promiscuous mode [ 290.322944][T12252] hsr_slave_1: entered promiscuous mode [ 290.336527][T12252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.350511][T12252] Cannot create hsr debugfs directory [ 290.745768][T12411] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 290.755231][T12411] bond0 (unregistering): Released all slaves [ 291.280969][T12444] __nla_validate_parse: 92 callbacks suppressed [ 291.280987][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 291.296808][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1619'. [ 291.304835][T12234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.350693][T12234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.382357][T12234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.422030][T12234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.499080][T12252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.518369][T12252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.538301][T12252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.557477][ T5849] Bluetooth: hci2: command tx timeout [ 291.562194][T12252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.721812][T12234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.801605][T12234] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.828291][T12252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.848157][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.855354][ T6954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.886969][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.894289][ T6946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.953350][T12252] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.031885][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.040407][ T6946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.074770][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.082014][ T6954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.205155][T12486] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 292.278399][ T5849] Bluetooth: hci3: command tx timeout [ 292.412787][T12499] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1631'. [ 292.424421][T12501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'. [ 292.447925][T12501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'. [ 292.462649][T12501] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 292.729701][T12499] bond0 (unregistering): Released all slaves [ 292.814093][T12234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.913657][T12234] veth0_vlan: entered promiscuous mode [ 292.957087][T12234] veth1_vlan: entered promiscuous mode [ 292.975821][T12510] lo speed is unknown, defaulting to 1000 [ 293.043321][T12252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.055630][T12510] wg1 speed is unknown, defaulting to 1000 [ 293.061796][T12234] veth0_macvtap: entered promiscuous mode [ 293.068231][T12234] veth1_macvtap: entered promiscuous mode [ 293.106832][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1633'. [ 293.168807][T12234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.176232][T12514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1633'. [ 293.217608][T12514] netem: unknown loss type 13 [ 293.222630][T12514] netem: change failed [ 293.357373][T12234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.384184][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1634'. [ 293.406581][ T6946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.451049][ T6946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.476946][ T6946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.546709][ T6946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.848462][T12511] netlink: 'syz.0.1632': attribute type 2 has an invalid length. [ 293.894159][T12252] veth0_vlan: entered promiscuous mode [ 293.931713][T12536] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1637'. [ 293.960438][ T6954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.973521][T12252] veth1_vlan: entered promiscuous mode [ 293.984160][ T6954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.260773][ T6957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.296623][ T6957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.343956][T12539] xt_CT: No such helper "pptp" [ 294.357453][ T5849] Bluetooth: hci3: command 0x0405 tx timeout [ 294.397760][T12252] veth0_macvtap: entered promiscuous mode [ 294.441427][T12252] veth1_macvtap: entered promiscuous mode [ 294.544204][T12252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.670690][T12252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.739978][ T6950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.760604][ T6950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.791540][ T6950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.793809][T12553] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1642'. [ 294.818760][ T6950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.150315][ T6952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.227139][ T6952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.254139][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.270893][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.292987][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.302824][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.371236][ T6952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.455483][ T6952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.832266][T12567] netlink: 'syz.0.1645': attribute type 1 has an invalid length. [ 295.868122][ T6952] bridge_slave_1: left allmulticast mode [ 295.873817][ T6952] bridge_slave_1: left promiscuous mode [ 295.884804][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.895440][ T6952] bridge_slave_0: left allmulticast mode [ 295.906755][ T6952] bridge_slave_0: left promiscuous mode [ 295.913990][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.085444][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.103567][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.113836][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.129545][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.144058][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.352336][ T6952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.364535][ T6952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.380412][ T6952] bond0 (unregistering): Released all slaves [ 296.468119][T12569] lo speed is unknown, defaulting to 1000 [ 296.475984][T12569] wg1 speed is unknown, defaulting to 1000 [ 296.895099][ T6952] hsr_slave_0: left promiscuous mode [ 296.910945][ T6952] hsr_slave_1: left promiscuous mode [ 296.922628][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.942038][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.953021][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.954394][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.960935][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.976841][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.985861][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.994333][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.003868][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.032333][ T6952] veth1_macvtap: left promiscuous mode [ 297.038647][ T6952] veth0_macvtap: left promiscuous mode [ 297.044275][ T6952] veth1_vlan: left promiscuous mode [ 297.049738][ T6952] veth0_vlan: left promiscuous mode [ 297.474874][ T6952] team0 (unregistering): Port device team_slave_1 removed [ 297.519735][ T6952] team0 (unregistering): Port device team_slave_0 removed [ 297.957861][T12597] __nla_validate_parse: 5 callbacks suppressed [ 297.957879][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 298.204954][ T5836] Bluetooth: hci2: command tx timeout [ 298.243682][T12606] netlink: 'syz.2.1655': attribute type 11 has an invalid length. [ 298.302953][T12594] lo speed is unknown, defaulting to 1000 [ 298.316727][T12599] lo speed is unknown, defaulting to 1000 [ 298.323735][T12594] wg1 speed is unknown, defaulting to 1000 [ 298.335785][T12599] wg1 speed is unknown, defaulting to 1000 [ 298.464802][T12613] netlink: 'syz.2.1658': attribute type 3 has an invalid length. [ 298.474951][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1658'. [ 298.493770][T12569] chnl_net:caif_netlink_parms(): no params data found [ 298.536682][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 298.546734][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 298.799442][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1661'. [ 298.813634][T12628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1661'. [ 298.849508][T12569] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.862869][T12569] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.871680][T12569] bridge_slave_0: entered allmulticast mode [ 298.880692][T12569] bridge_slave_0: entered promiscuous mode [ 298.944273][T12569] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.957496][T12569] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.975009][T12569] bridge_slave_1: entered allmulticast mode [ 298.989445][T12569] bridge_slave_1: entered promiscuous mode [ 299.078029][ T5836] Bluetooth: hci3: command tx timeout [ 299.152389][ T6950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.192739][T12569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.215526][T12648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.217622][T12594] chnl_net:caif_netlink_parms(): no params data found [ 299.256011][T12569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.338113][ T6950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.412098][T12569] team0: Port device team_slave_0 added [ 299.470697][T12641] lo speed is unknown, defaulting to 1000 [ 299.523937][ T6950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.548290][T12569] team0: Port device team_slave_1 added [ 299.554752][T12644] lo speed is unknown, defaulting to 1000 [ 299.569551][T12641] wg1 speed is unknown, defaulting to 1000 [ 299.576582][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 299.633666][T12644] wg1 speed is unknown, defaulting to 1000 [ 299.677100][ T6950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.682112][T12658] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1668'. [ 299.746961][T12569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.755334][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.782724][T12569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.802281][T12594] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.809954][T12594] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.817148][T12594] bridge_slave_0: entered allmulticast mode [ 299.824565][T12594] bridge_slave_0: entered promiscuous mode [ 299.833972][T12594] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.842021][T12594] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.849545][T12594] bridge_slave_1: entered allmulticast mode [ 299.857656][T12594] bridge_slave_1: entered promiscuous mode [ 299.900259][T12569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.908406][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.934768][T12569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.041656][T12594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.101852][T12594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.144947][T12569] hsr_slave_0: entered promiscuous mode [ 300.160136][T12569] hsr_slave_1: entered promiscuous mode [ 300.166879][T12569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.179666][T12569] Cannot create hsr debugfs directory [ 300.277369][ T5836] Bluetooth: hci2: command tx timeout [ 300.318489][T12594] team0: Port device team_slave_0 added [ 300.332964][T12660] lo speed is unknown, defaulting to 1000 [ 300.349349][T12594] team0: Port device team_slave_1 added [ 300.372647][T12660] wg1 speed is unknown, defaulting to 1000 [ 300.460566][T12665] netlink: 'syz.2.1670': attribute type 10 has an invalid length. [ 300.484159][T12594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.491492][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.519265][T12594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.536095][ T6950] bridge_slave_1: left allmulticast mode [ 300.545462][ T6950] bridge_slave_1: left promiscuous mode [ 300.551553][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.561486][ T6950] bridge_slave_0: left allmulticast mode [ 300.567134][ T6950] bridge_slave_0: left promiscuous mode [ 300.573219][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.915578][ T6950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.926642][ T6950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.936912][ T6950] bond0 (unregistering): Released all slaves [ 300.964133][T12594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.988888][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.020387][T12594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.157631][ T5836] Bluetooth: hci3: command tx timeout [ 301.195680][T12594] hsr_slave_0: entered promiscuous mode [ 301.202329][T12670] x_tables: duplicate underflow at hook 4 [ 301.233325][T12594] hsr_slave_1: entered promiscuous mode [ 301.241420][T12594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.249997][T12594] Cannot create hsr debugfs directory [ 301.376327][T12673] tipc: Resetting bearer [ 301.514967][ T6950] hsr_slave_0: left promiscuous mode [ 301.532490][ T6950] hsr_slave_1: left promiscuous mode [ 301.542077][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.552281][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.568202][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.576523][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.612502][ T6950] veth1_macvtap: left promiscuous mode [ 301.620862][ T6950] veth0_macvtap: left promiscuous mode [ 301.626574][ T6950] veth1_vlan: left promiscuous mode [ 301.634165][ T6950] veth0_vlan: left promiscuous mode [ 302.053253][ T6950] team0 (unregistering): Port device team_slave_1 removed [ 302.091901][ T6950] team0 (unregistering): Port device team_slave_0 removed [ 302.363226][ T5836] Bluetooth: hci2: command tx timeout [ 302.516803][T12675] : entered promiscuous mode [ 302.821164][T12687] lo speed is unknown, defaulting to 1000 [ 302.839194][T12687] wg1 speed is unknown, defaulting to 1000 [ 302.849150][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'. [ 303.238046][ T5836] Bluetooth: hci3: command tx timeout [ 303.712917][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 304.442111][ T5836] Bluetooth: hci2: command tx timeout [ 305.315513][T12569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.322392][ T5836] Bluetooth: hci3: command tx timeout [ 305.339444][T12569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.353550][T12569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.376750][T12569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.779132][T12735] bond0: entered promiscuous mode [ 305.797460][T12735] bond0: entered allmulticast mode [ 305.806180][T12735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.901239][T12569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.076508][T12569] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.109847][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.117206][ T6946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.137696][T12594] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 306.241540][T12594] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 306.293977][T12594] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.335840][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.343055][ T6952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.374647][T12594] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.505710][T12761] netlink: 'syz.0.1697': attribute type 12 has an invalid length. [ 306.513885][T12761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1697'. [ 306.813257][T12594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.974438][T12594] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.062286][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.069515][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.154292][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.161655][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.216812][T12798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1704'. [ 307.226632][T12794] lo speed is unknown, defaulting to 1000 [ 307.230456][T12798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1704'. [ 307.272343][T12794] wg1 speed is unknown, defaulting to 1000 [ 307.293195][T12569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.314375][T12798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1704'. [ 307.326143][T12798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1704'. [ 307.349264][T12790] lo speed is unknown, defaulting to 1000 [ 307.385975][T12790] wg1 speed is unknown, defaulting to 1000 [ 307.434244][T12803] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1705'. [ 307.533508][T12805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1706'. [ 307.576673][T12569] veth0_vlan: entered promiscuous mode [ 307.593957][T12569] veth1_vlan: entered promiscuous mode [ 307.653319][T12569] veth0_macvtap: entered promiscuous mode [ 307.675401][T12569] veth1_macvtap: entered promiscuous mode [ 308.013881][T12569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.062245][T12569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.200140][ T205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.211645][T12830] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1711'. [ 308.212513][T12834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1713'. [ 308.235751][ T205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.286155][ T205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.312956][T12827] lo speed is unknown, defaulting to 1000 [ 308.336581][ T205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.357159][T12827] wg1 speed is unknown, defaulting to 1000 [ 308.415464][T12594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.749294][T12848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.841196][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.870456][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.012285][ T6950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.034831][ T6950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.196073][T12594] veth0_vlan: entered promiscuous mode [ 309.214873][T12594] veth1_vlan: entered promiscuous mode [ 309.488289][T12870] __nla_validate_parse: 2 callbacks suppressed [ 309.488308][T12870] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1718'. [ 309.615540][T12594] veth0_macvtap: entered promiscuous mode [ 309.639498][T12594] veth1_macvtap: entered promiscuous mode [ 309.755553][T12594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.832051][T12594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.884938][ T205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.908475][ T205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.052004][ T7818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.080853][ T205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.097156][ T205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.134216][ T7818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.202665][ T6952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.216407][ T6952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.241094][ T6952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.250287][ T6952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.328533][ T7818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.484363][ T7818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.597001][ T7818] bridge_slave_1: left allmulticast mode [ 310.605492][ T7818] bridge_slave_1: left promiscuous mode [ 310.612184][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.623686][ T7818] bridge_slave_0: left allmulticast mode [ 310.632174][ T7818] bridge_slave_0: left promiscuous mode [ 310.641118][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.342807][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.353863][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.363532][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.371852][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.379835][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.499557][ T7818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.534994][ T7818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.551656][ T7818] bond0 (unregistering): Released all slaves [ 311.648063][T12903] lo speed is unknown, defaulting to 1000 [ 311.691994][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 311.708048][T12893] lo speed is unknown, defaulting to 1000 [ 311.714446][T12903] wg1 speed is unknown, defaulting to 1000 [ 311.742114][T12893] wg1 speed is unknown, defaulting to 1000 [ 311.939173][T12920] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 312.140006][T12927] netlink: 'syz.0.1731': attribute type 29 has an invalid length. [ 312.162040][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.173306][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.183026][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.193074][T12927] netlink: 'syz.0.1731': attribute type 29 has an invalid length. [ 312.202628][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.208872][T12927] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1731'. [ 312.221721][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.239669][T12931] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1732'. [ 312.249549][T12927] unsupported nla_type 58 [ 312.266444][ T7818] hsr_slave_0: left promiscuous mode [ 312.274496][ T7818] hsr_slave_1: left promiscuous mode [ 312.281745][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.290062][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.302951][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.310464][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.341260][ T7818] veth1_macvtap: left promiscuous mode [ 312.348705][ T7818] veth0_macvtap: left promiscuous mode [ 312.355175][ T7818] veth1_vlan: left promiscuous mode [ 312.361560][ T7818] veth0_vlan: left promiscuous mode [ 312.852257][ T7818] team0 (unregistering): Port device team_slave_1 removed [ 312.895918][ T7818] team0 (unregistering): Port device team_slave_0 removed [ 313.398194][ T5836] Bluetooth: hci2: command tx timeout [ 313.438981][T12945] nbd: must specify a device to reconfigure [ 313.622838][T12928] lo speed is unknown, defaulting to 1000 [ 313.653144][T12903] chnl_net:caif_netlink_parms(): no params data found [ 313.710502][T12928] wg1 speed is unknown, defaulting to 1000 [ 313.711651][T12958] smc: net device bond0 applied user defined pnetid SYZ2 [ 313.734269][T12958] smc: net device bond0 erased user defined pnetid SYZ2 [ 313.749100][T12956] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.1740'. [ 313.887637][T12962] netlink: 'syz.0.1741': attribute type 13 has an invalid length. [ 313.895641][T12962] netlink: 'syz.0.1741': attribute type 17 has an invalid length. [ 313.931816][T12962] gretap0: refused to change device tx_queue_len [ 313.946746][T12962] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 314.062385][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.071950][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.084760][T12903] bridge_slave_0: entered allmulticast mode [ 314.093634][T12903] bridge_slave_0: entered promiscuous mode [ 314.119239][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.127523][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.135352][T12903] bridge_slave_1: entered allmulticast mode [ 314.143489][T12903] bridge_slave_1: entered promiscuous mode [ 314.254198][ T7818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.283457][ T5836] Bluetooth: hci3: command tx timeout [ 314.455241][ T7818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.494129][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.594927][ T7818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.621916][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.680483][T12987] lo speed is unknown, defaulting to 1000 [ 314.858056][ T7818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.887452][T12987] wg1 speed is unknown, defaulting to 1000 [ 314.970343][T12998] netlink: 'syz.0.1749': attribute type 11 has an invalid length. [ 314.994999][T12998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1749'. [ 315.011810][T12928] chnl_net:caif_netlink_parms(): no params data found [ 315.035343][T12903] team0: Port device team_slave_0 added [ 315.140339][T12903] team0: Port device team_slave_1 added [ 315.440006][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.456911][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.490393][ T5836] Bluetooth: hci2: command tx timeout [ 315.515804][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.534693][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.547364][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.575817][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.693597][ T7818] bridge_slave_1: left allmulticast mode [ 315.700044][ T7818] bridge_slave_1: left promiscuous mode [ 315.705842][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.724664][ T7818] bridge_slave_0: left allmulticast mode [ 315.736075][ T7818] bridge_slave_0: left promiscuous mode [ 315.744415][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.283464][ T7818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.300805][ T7818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.315645][ T7818] bond0 (unregistering): Released all slaves [ 316.360788][T12928] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.371805][ T5836] Bluetooth: hci3: command tx timeout [ 316.378455][T12928] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.385718][T12928] bridge_slave_0: entered allmulticast mode [ 316.405214][T12928] bridge_slave_0: entered promiscuous mode [ 316.417334][T12928] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.424485][T12928] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.433329][T12928] bridge_slave_1: entered allmulticast mode [ 316.443772][T12928] bridge_slave_1: entered promiscuous mode [ 316.459343][T13033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.544536][T12903] hsr_slave_0: entered promiscuous mode [ 316.568435][T12903] hsr_slave_1: entered promiscuous mode [ 316.574866][T12903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.588734][T12903] Cannot create hsr debugfs directory [ 316.758951][T13064] unknown channel width for channel at 909000KHz? [ 316.869310][T13068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1769'. [ 316.901312][T12928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.001848][T12928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.214499][T12928] team0: Port device team_slave_0 added [ 317.282181][ T7818] hsr_slave_0: left promiscuous mode [ 317.293499][ T7818] hsr_slave_1: left promiscuous mode [ 317.313191][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.321694][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.334407][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.350986][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.394501][ T7818] veth1_macvtap: left promiscuous mode [ 317.418383][ T7818] veth0_macvtap: left promiscuous mode [ 317.424069][ T7818] veth1_vlan: left promiscuous mode [ 317.429916][ T7818] veth0_vlan: left promiscuous mode [ 317.557701][ T5836] Bluetooth: hci2: command tx timeout [ 317.997080][ T7818] team0 (unregistering): Port device team_slave_1 removed [ 318.035783][ T7818] team0 (unregistering): Port device team_slave_0 removed [ 318.439120][ T5836] Bluetooth: hci3: command tx timeout [ 318.465068][T12928] team0: Port device team_slave_1 added [ 318.494425][T13102] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 318.503736][T13102] syzkaller1: linktype set to 780 [ 318.522543][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 318.532113][T13105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1775'. [ 318.542666][T13111] IPVS: Error joining to the multicast group [ 318.652276][T13117] openvswitch: netlink: Flow actions attr not present in new flow. [ 318.662051][T12928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.669361][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.697027][T12928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.755412][T12928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.763848][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.799396][T12928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.108803][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'. [ 319.135207][T12928] hsr_slave_0: entered promiscuous mode [ 319.148302][T12928] hsr_slave_1: entered promiscuous mode [ 319.154524][T12928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.177433][T12928] Cannot create hsr debugfs directory [ 319.637743][ T5836] Bluetooth: hci2: command tx timeout [ 319.815578][T13155] netlink: 'syz.0.1788': attribute type 4 has an invalid length. [ 319.835326][T12903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.855852][T12903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.880847][T12903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.988152][T12903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.109655][T13167] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1789'. [ 320.162377][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 320.198645][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 320.253035][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 320.312217][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.363597][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.425973][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.433204][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.445792][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.453021][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.519554][ T5836] Bluetooth: hci3: command tx timeout [ 320.596128][T13185] lo speed is unknown, defaulting to 1000 [ 320.606649][T12928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.630098][T12928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.661426][T13185] wg1 speed is unknown, defaulting to 1000 [ 320.701331][T12928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.704441][T13188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1795'. [ 320.903819][T12928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.949580][T13193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.561007][T12928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.626049][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.743100][T12928] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.778965][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.786168][ T6950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.823967][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.831171][ T6950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.908449][T12903] veth0_vlan: entered promiscuous mode [ 321.956422][T12903] veth1_vlan: entered promiscuous mode [ 322.083154][T13232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1802'. [ 322.109803][T13232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1802'. [ 322.134146][T12903] veth0_macvtap: entered promiscuous mode [ 322.175130][T12903] veth1_macvtap: entered promiscuous mode [ 322.246562][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.310712][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.339614][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.361514][ T6950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.566066][ T6950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.648730][ T6950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.712067][T12928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.917001][ T6950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.948880][ T6950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.018142][ T6950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.036679][ T6950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.053873][T13261] lo speed is unknown, defaulting to 1000 [ 323.115794][T13261] wg1 speed is unknown, defaulting to 1000 [ 323.625194][ T4195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.697133][T12928] veth0_vlan: entered promiscuous mode [ 323.743767][T12928] veth1_vlan: entered promiscuous mode [ 323.793905][ T4195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.872853][T12928] veth0_macvtap: entered promiscuous mode [ 323.926091][ T4195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.954733][T12928] veth1_macvtap: entered promiscuous mode [ 323.981802][T12928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.005940][T12928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.032640][ T4195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.074601][ T6946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.093761][ T6946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.115343][ T6946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.131517][ T6946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.268643][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.287331][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.332679][ T4195] bridge_slave_1: left allmulticast mode [ 324.340876][ T4195] bridge_slave_1: left promiscuous mode [ 324.346579][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.356687][ T4195] bridge_slave_0: left allmulticast mode [ 324.370241][ T4195] bridge_slave_0: left promiscuous mode [ 324.375972][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.705318][ T4195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.716319][ T4195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.730324][ T4195] bond0 (unregistering): Released all slaves [ 324.751336][ T7818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.759948][ T7818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.836528][T12928] ------------[ cut here ]------------ [ 324.842562][T12928] refcount_t: underflow; use-after-free. [ 324.848653][T12928] WARNING: CPU: 0 PID: 12928 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 324.859661][T12928] Modules linked in: [ 324.863953][T12928] CPU: 0 UID: 0 PID: 12928 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 324.877111][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.888223][T12928] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 324.894407][T12928] Code: c0 42 e2 8b e8 f7 7c c2 fc 90 0f 0b 90 90 eb d7 e8 5b d4 fe fc c6 05 02 b8 c9 0a 01 90 48 c7 c7 20 43 e2 8b e8 d7 7c c2 fc 90 <0f> 0b 90 90 eb b7 e8 3b d4 fe fc c6 05 df b7 c9 0a 01 90 48 c7 c7 [ 324.914937][T12928] RSP: 0018:ffffc9000442f7d8 EFLAGS: 00010246 [ 324.921616][T12928] RAX: c0f11c924caa4800 RBX: 0000000000000003 RCX: ffff888027561e00 [ 324.929936][T12928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 SYZFAIL: failed to send rpc fd=3 want=664 sent=0 n=-1 (errno 32: Broken pipe) [ 324.938286][T12928] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 324.946324][T12928] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88807c04ac00 [ 324.954907][T12928] R13: ffff888059216860 R14: ffff888059216878 R15: dffffc0000000000 [ 324.963314][T12928] FS: 0000000000000000(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 324.973146][T12928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.980624][T12928] CR2: 00007ffde27b1850 CR3: 000000000df38000 CR4: 00000000003526f0 [ 324.988978][T12928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.996967][T12928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 325.005342][T12928] Call Trace: [ 325.008691][T12928] [ 325.011641][T12928] klist_dec_and_del+0x3c7/0x3d0 [ 325.016628][T12928] klist_remove+0x1bd/0x340 [ 325.021309][T12928] ? __pfx_klist_children_put+0x10/0x10 [ 325.026878][T12928] ? __pfx_klist_remove+0x10/0x10 [ 325.031959][T12928] ? __pfx_kobject_move+0x10/0x10 [ 325.037176][T12928] ? get_device_parent+0x366/0x3a0 [ 325.042361][T12928] device_move+0x193/0x700 [ 325.046794][T12928] hci_conn_del_sysfs+0xb8/0x170 [ 325.051927][T12928] hci_conn_del+0x8ff/0xcb0 [ 325.056462][T12928] hci_conn_hash_flush+0x191/0x230 [ 325.061730][T12928] hci_dev_close_sync+0xaef/0x1330 [ 325.066872][T12928] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 325.072492][T12928] ? up_write+0x1c4/0x420 [ 325.076849][T12928] hci_unregister_dev+0x21a/0x510 [ 325.082712][T12928] vhci_release+0x80/0xd0 [ 325.087699][T12928] ? __pfx_vhci_release+0x10/0x10 [ 325.092745][T12928] __fput+0x44c/0xa70 [ 325.096764][T12928] task_work_run+0x1d1/0x260 [ 325.101469][T12928] ? __pfx_task_work_run+0x10/0x10 [ 325.106607][T12928] ? kmem_cache_free+0x18f/0x400 [ 325.111689][T12928] do_exit+0x6b5/0x22e0 [ 325.115878][T12928] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 325.121327][T12928] ? __pfx_do_exit+0x10/0x10 [ 325.126041][T12928] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.131332][T12928] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.137917][T12928] do_group_exit+0x21c/0x2d0 [ 325.142541][T12928] __x64_sys_exit_group+0x3f/0x40 [ 325.147856][T12928] x64_sys_call+0x21ba/0x21c0 [ 325.152652][T12928] do_syscall_64+0xfa/0x3b0 [ 325.158042][T12928] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.163269][T12928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.169633][T12928] ? clear_bhb_loop+0x60/0xb0 [ 325.174346][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.180882][T12928] RIP: 0033:0x7f1d0958e929 [ 325.185850][T12928] Code: Unable to access opcode bytes at 0x7f1d0958e8ff. [ 325.193154][T12928] RSP: 002b:00007ffde27b3a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 325.201690][T12928] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1d0958e929 [ 325.209767][T12928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 325.217826][T12928] RBP: 00007f1d095ee8f0 R08: 00007ffde27b17c7 R09: 0000000000000003 [ 325.225823][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.233877][T12928] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffde27b3be0 [ 325.242610][T12928] [ 325.245661][T12928] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 325.252949][T12928] CPU: 0 UID: 0 PID: 12928 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 325.265210][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.275372][T12928] Call Trace: [ 325.278676][T12928] [ 325.281616][T12928] dump_stack_lvl+0x99/0x250 [ 325.286224][T12928] ? __asan_memcpy+0x40/0x70 [ 325.290829][T12928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.296049][T12928] ? __pfx__printk+0x10/0x10 [ 325.300660][T12928] panic+0x2db/0x790 [ 325.304561][T12928] ? __pfx_panic+0x10/0x10 [ 325.308988][T12928] __warn+0x31b/0x4b0 [ 325.312961][T12928] ? refcount_warn_saturate+0x11a/0x1d0 [ 325.318504][T12928] ? refcount_warn_saturate+0x11a/0x1d0 [ 325.324043][T12928] report_bug+0x2be/0x4f0 [ 325.328358][T12928] ? refcount_warn_saturate+0x11a/0x1d0 [ 325.333900][T12928] ? refcount_warn_saturate+0x11a/0x1d0 [ 325.339449][T12928] ? refcount_warn_saturate+0x11c/0x1d0 [ 325.344990][T12928] handle_bug+0x84/0x160 [ 325.349229][T12928] exc_invalid_op+0x1a/0x50 [ 325.353725][T12928] asm_exc_invalid_op+0x1a/0x20 [ 325.358567][T12928] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 325.364719][T12928] Code: c0 42 e2 8b e8 f7 7c c2 fc 90 0f 0b 90 90 eb d7 e8 5b d4 fe fc c6 05 02 b8 c9 0a 01 90 48 c7 c7 20 43 e2 8b e8 d7 7c c2 fc 90 <0f> 0b 90 90 eb b7 e8 3b d4 fe fc c6 05 df b7 c9 0a 01 90 48 c7 c7 [ 325.384332][T12928] RSP: 0018:ffffc9000442f7d8 EFLAGS: 00010246 [ 325.390399][T12928] RAX: c0f11c924caa4800 RBX: 0000000000000003 RCX: ffff888027561e00 [ 325.398364][T12928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 325.406320][T12928] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 325.414283][T12928] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88807c04ac00 [ 325.422242][T12928] R13: ffff888059216860 R14: ffff888059216878 R15: dffffc0000000000 [ 325.430310][T12928] ? refcount_warn_saturate+0x119/0x1d0 [ 325.435870][T12928] klist_dec_and_del+0x3c7/0x3d0 [ 325.440805][T12928] klist_remove+0x1bd/0x340 [ 325.445383][T12928] ? __pfx_klist_children_put+0x10/0x10 [ 325.450922][T12928] ? __pfx_klist_remove+0x10/0x10 [ 325.455938][T12928] ? __pfx_kobject_move+0x10/0x10 [ 325.460953][T12928] ? get_device_parent+0x366/0x3a0 [ 325.466056][T12928] device_move+0x193/0x700 [ 325.470466][T12928] hci_conn_del_sysfs+0xb8/0x170 [ 325.475397][T12928] hci_conn_del+0x8ff/0xcb0 [ 325.479899][T12928] hci_conn_hash_flush+0x191/0x230 [ 325.485014][T12928] hci_dev_close_sync+0xaef/0x1330 [ 325.490134][T12928] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 325.495675][T12928] ? up_write+0x1c4/0x420 [ 325.500000][T12928] hci_unregister_dev+0x21a/0x510 [ 325.505019][T12928] vhci_release+0x80/0xd0 [ 325.509341][T12928] ? __pfx_vhci_release+0x10/0x10 [ 325.514354][T12928] __fput+0x44c/0xa70 [ 325.518350][T12928] task_work_run+0x1d1/0x260 [ 325.522937][T12928] ? __pfx_task_work_run+0x10/0x10 [ 325.528040][T12928] ? kmem_cache_free+0x18f/0x400 [ 325.532971][T12928] do_exit+0x6b5/0x22e0 [ 325.537124][T12928] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 325.542500][T12928] ? __pfx_do_exit+0x10/0x10 [ 325.547089][T12928] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.552295][T12928] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.557495][T12928] do_group_exit+0x21c/0x2d0 [ 325.562092][T12928] __x64_sys_exit_group+0x3f/0x40 [ 325.567106][T12928] x64_sys_call+0x21ba/0x21c0 [ 325.571773][T12928] do_syscall_64+0xfa/0x3b0 [ 325.576268][T12928] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.581461][T12928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.587515][T12928] ? clear_bhb_loop+0x60/0xb0 [ 325.592187][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.598069][T12928] RIP: 0033:0x7f1d0958e929 [ 325.602477][T12928] Code: Unable to access opcode bytes at 0x7f1d0958e8ff. [ 325.609480][T12928] RSP: 002b:00007ffde27b3a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 325.617889][T12928] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1d0958e929 [ 325.625853][T12928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 325.633826][T12928] RBP: 00007f1d095ee8f0 R08: 00007ffde27b17c7 R09: 0000000000000003 [ 325.641790][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.649755][T12928] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffde27b3be0 [ 325.657734][T12928] [ 325.661030][T12928] Kernel Offset: disabled [ 325.665343][T12928] Rebooting in 86400 seconds..