last executing test programs: 2m10.022615628s ago: executing program 3 (id=3072): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7}, 0x90) r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x10000004}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f00000004c0)={0xe0000012}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10040020}, 0x8845) (async) r7 = socket(0xa, 0x2, 0x4000020) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff2abd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="00270200ee320500140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="c2126ef6a920edd43668f1ff01d3c5d8523caf04c06b5a9bfd4a000604a63e817ee294b2531cd2d3fbe60a6c10ce9ace07465e75ddded26680a9e6a99f87c3a5ca52a457a9de64cfdcca002cbc6d0954a760d48c906f3d91832f29ed3d8fe730a851a3f961cba7e8107198884e9c932aa6698b2d425203e5e63d3209f7a2470f98462242a56ebd1621ac168702d715a59a8d3efccb83e841c749e15bf71a58e70ba35c4c6c012024d24d329bd3d26eb9b8dceabdc4ca2fdd"], 0x44}, 0x1, 0x0, 0x0, 0xc001}, 0x4046010) 2m9.888275212s ago: executing program 3 (id=3073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c00000004000000f4ff0000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000f05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000001540)={'tunl0\x00', 0x0, 0x40, 0x7, 0x7, 0x1, {{0x5, 0x4, 0x2, 0x16, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x80, 0xfd}, [@RTA_PREFSRC={0x8, 0x7, @multicast1}]}, 0x24}}, 0x8052) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000400010000008000"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000040)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000001300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @private1, 0x0, 0x8, 0x51, 0x400, 0x0, 0x280220}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000044000701fcffff00fddbdf25017c0000060003809e710000"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0xffff0000, 0x31, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 2m9.814340294s ago: executing program 3 (id=3074): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0x31}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x8001}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r4, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmmsg$inet6(r1, &(0x7f0000002480)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffe00, @local, 0x1}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000000800)='a', 0x1}], 0x1}}], 0x1, 0x44844) 2m9.691508416s ago: executing program 3 (id=3075): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @rand_addr=' \x01\x00', 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4000890, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) sendto$packet(r1, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x0, 0x6, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x40, 0x8000, 0xff, 0x10001}}) ioctl$sock_SIOCGIFCONF(r5, 0x890b, &(0x7f0000000000)=@buf={0xc0fe, &(0x7f0000000140)}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', r4, 0x7800, 0x20, 0x7ff, 0xe, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @cipso={0x86, 0x24, 0x0, [{0xc, 0x3, "f0"}, {0x0, 0xe, "a6ec573278515f76b4253477"}, {0x6, 0xd, "07058a4bab47e16687944c"}]}, @lsrr={0x83, 0x17, 0x44, [@multicast1, @remote, @rand_addr=0x64010101, @multicast1, @multicast2]}, @noop, @lsrr={0x83, 0x13, 0x8a, [@broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) 2m9.46403708s ago: executing program 3 (id=3076): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x94) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES8=r1], 0x10) (async) unshare(0x400) (async, rerun: 32) r2 = socket$phonet(0x23, 0x2, 0x1) (rerun: 32) bind$phonet(r2, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0xfffd, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x1, 0x32}, 0x2, @in=@empty, 0x3502, 0x1, 0x1, 0x0, 0x6, 0xfffffffd}}, 0xe8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) close(r0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005ffe13f9f407000901000000000000000500000000080004000100000000", 0x24) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), r8) sendmsg$NFC_CMD_DEP_LINK_DOWN(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fcdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async, rerun: 64) r10 = socket(0x2c, 0x80000, 0x3) (async, rerun: 64) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x5}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) 2m9.279036884s ago: executing program 3 (id=3083): socket$netlink(0x10, 0x3, 0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)=0x4010, 0x4) (async, rerun: 64) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="e0000000100001002dbd7000fcdbdf256563622861726334292d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000002000000000000000000000a8be2ee0ce573dcf486f522bc6f471e4900691c01a5c8e7ac059e0e1a5fe9b79c6dcbe0588f2b0f79ea86bd27a79e7bcba63223bed96ad641672c2f4dfb465d9183c8d81eb80e08bfd235f667fe074a6ca02f64058ac79b49b76546fad88d8b111f4f7c8f89c56e2304ca9634786e9298608c4d7cea9a949acc51cc03d8fcb26a458c92deb52549413b0a716ae87ab3b39ae9f865cd7771e29b96ef2bb35c8c809447d82010b3aa297c7359f629b289bdcb37f1b05e67e14f7804945bcbefdc73f3a2c8438a065"], 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async, rerun: 32) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x1, {0x1, 0x1}, {0x2, 0x0, 0x2}, 0x0, 0xff}, {0x2, 0x2, {0x0, 0xff, 0x4}, {0x0, 0x1, 0x1}, 0xfe, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x2}}, {0x3, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x5}, 0x0, 0xff}, {0x3, 0x2, {0x0, 0xff, 0x3}, {0x2, 0x1, 0x2}, 0x0, 0xfe}], 0xa0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) 2m9.186404879s ago: executing program 4 (id=3087): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) socket(0x2a, 0x2, 0x0) (rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x2000}, {r4, 0x4005}], 0x2, &(0x7f0000000140), &(0x7f0000000180)={[0x6]}, 0x8) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) (rerun: 32) 2m9.06196784s ago: executing program 4 (id=3089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001840)={0x5, 0x4, 0x551, 0x7fffffff, 0x0}, &(0x7f0000001880)=0x10) sendmsg$inet_sctp(r1, &(0x7f0000001980)={&(0x7f0000000180)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000580)="b3afae64bf59c972bd43bdbf33f3ade81ec21ab763c8ffde969148ab8d4de264e0b98a0c73025d2e9c03e27f326cdf5d9d84f0bfe3056a4e22ee3ab9015c2e69122714184098f4be157129cf71ea1a433cd4398e0cdbbfff79a403c869c0dbdbc9a12daf7d11da0cad4562c735a08c21b2181460a5f1082e8857b818b86e4d917e3cc638927ae6159f84859f067df45d3fa1460b763a49389e95e35b0a8ec80b9b4ecaf7716a03d1e9b29a5e25477ee35ca18e56af52b7c49b5fa2878e5e86495418d823df50984b37015968591c6a52352bc714", 0xd4}, {&(0x7f00000001c0)="95ee8e6250b080ea16f842a2d4cb", 0xe}, {&(0x7f00000006c0)="d119e229b441d65ddb83dda9e4f16d11167b5ad4520e179115ac0da89873f9ab8b3157fda069742ef029819e7e9199e3b303f72b0c5f8349778d390a35f042d410b6b8a6f187225a18461556d2d69e2864c8936e7f8c23d67511bf4d67e2d7dea9743a7b3856dcbd3d040e908a39710bf05e01ecd1acac4c175a74b0922233114cd7ed3cc75e6aae42dd445f2fbbe6965ad10cd99c0d31d28f7819f9da8c978b76ed1be040c5303dd55ce745b957f57b2a2a65b194f542c9d650a8b705f16e2cb9c2e70b150bd2d6b1f913a45fd6a9ba9f52e5fe3ec1a483d1b73f1c1ee341c1ad90d54ce94e904b45a49d", 0xeb}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000240)="53391f99688d8f8478aba36b8c8d3840f9eb4da0b7fbe940323af32b334880fc38c4f3e573cbabbb7942d7cd", 0x2c}, {&(0x7f0000000400)="1467008186b5f0b0ae873e3806c093844e9b1e9d3bad547755fa2950fe0ccc7ce759879285df6d66296efa539c5c25eb5e3444e3efc55a3e74ffcc", 0x3b}], 0x6, &(0x7f00000018c0)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x800, 0x8000, 0x1, 0x1ff, 0x800, 0x0, 0xf}}, @authinfo={0x18, 0x84, 0x6, {0x53}}, @init={0x18, 0x84, 0x0, {0x1, 0x0, 0xcd, 0x305}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x104, 0x6, 0x7ff, r2}}], 0xa0, 0x4001}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000000)="0004") sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB], 0x3c}}, 0x0) 2m8.825044728s ago: executing program 4 (id=3096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) recvmmsg(r3, &(0x7f00000031c0), 0x0, 0x40000121, 0x0) socket(0x1, 0x3, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r9, 0x303, 0xfffffffd, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) unshare(0x42000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780800001cac1414aac100089078"], 0x0) 2m7.842786503s ago: executing program 4 (id=3103): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) sendmmsg$inet(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6", 0x228}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x42, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 2m6.816299985s ago: executing program 4 (id=3113): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000400)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040126bd7000fedbdf250a00000008000200050000000500050005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x40) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001580)=0x14, 0x800) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000080)=0x3fc, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007400000074000000050000000c000000000000110300000003000000000000000500000d000000001000000004000000060000000200000005000000030000000f0000000500000900feffffffffffff0700000002000084020000001000000003000000010000000400000003000000060000000e000000000000100400000000302e0000"], &(0x7f0000000500)=""/4096, 0x91, 0x1000, 0x1, 0x1d}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1812000065220b33cc683d94514f442b43fd1a48e2f20fb90bfcdd91a5b6807f9d5e7ca5524681bb356e6cd88b24cd21823c67f4ee656f089b0e9b1f7826e4e2e3aa808db61877d48f26bf16c39859b3506f406ec123075a236bfd1f0aff3f9d4cf97088ef3fb45a976d4aa0f519b3e7ec512244f600", @ANYRES16=r0, @ANYBLOB="0000000000000000b703000000080000850000000c000000b700000000000000186300000b000000000000050600000018460000feffffff0000000000000000183900000100"/80], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r3}, 0x94) 2m6.795592127s ago: executing program 4 (id=3115): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)="92a9bf8c33ec8276f65c26e89c63e17ae2de039f7e76c25937942273da90bc6a8bb00c24323e3d7e41", &(0x7f00000002c0)="d8441830d31dcb739cad1d4a9ef5ada1be690db49cf01eaa712339d879ee4eed56024babc63b22f651d444d1b1606d32df08e3da18798638b2a24eb95764a1114d14abd8dd0ec3cff3c9651d", 0x2, r3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000001c0)="d349b2fbc2c0eb9e7d138662962ce72e23ecd07a89bdc808003cdbc42916a0700584655ac61ed316471281618f6c07643cfe37a4d09de681ae419e74b8", 0x1000, r3, 0x4}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0x900}) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) r4 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x3, 0x10) (async) r5 = socket(0xb, 0x4, 0xffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async, rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0000400", @ANYRES16=r7, @ANYBLOB="7961fdffffff000000007e0000000c0099006d91000015000000"], 0x20}}, 0x4000054) (rerun: 32) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r9, 0x100, 0x70bd2a, 0x25dfdc01, {}, ["", "", "", "", ""]}, 0x1a}, 0x1, 0x0, 0x0, 0x40040}, 0x18014) (async) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) (async) close(r5) (async) pipe(&(0x7f0000000640)) (async) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000001e0000009500001900000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='ext4_journal_start\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) 2m4.369845779s ago: executing program 0 (id=3140): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0x40, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) accept$inet6(r1, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000740)=@assoc_value={0x0, 0xf5}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000060000", @ANYRES64=r0, @ANYBLOB="00000000280012800b000100677265"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114c00000000008510000002000000850000008a00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) 2m3.76008578s ago: executing program 0 (id=3142): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r5) pipe(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x24, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x58, 0x0, 0x0, @u64}, @typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff]}}], 0x70, 0x50}, 0x200400c4) sendmsg$netlink(r4, &(0x7f00000031c0)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f00)=[{&(0x7f0000003200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="5ad0fe98ef282e9697df4b4bd065e73093a34731c9d1df0d5062f4366e4472669dbf5eafbb9e99c86c9f6bfb874e35b15fc4e19382814d09fc7a8a6623a13c98d01c5f14258fa0e185f387defd3d9a5c7fcfe1f04f510eb681fffb6834944b247dba0f999eeff8fe6f76201007af77ac5af8fe520b651071e2f413555af20260b1b8f1bef36bba2fb151f3258cf0b41c9c92f08d6d745f2a3d7c2192e92f370ccd239072cd68072bbd16f40634799544944643db5a1aacfe6ced51ac6f8a94488ad12b6db1519c62d80a954eaac04a5ece3a5d7b1fa0a8c4620f60c124e55c3777c7be07ab9c399e4134132ddd06698f69e42fdd3c67ccda84f3d10bb33fc347e4e8f8ec5a3d5340001f796f113b0db37d4a600c051b1002808e3afc747dc791b043a0c4f62ae90dc85ceb3645b2faaab7d9a7fe9e5971d8a439e4ff37fb8e0c7983b60f7634ce9954489576b609b7b26d1cec979c7546307d07202d188596203b4b815c9568fb12c7453e635aea46232dc519a76685eb71c8684312652bdaac04005f80000008001200023cbeb7", @ANYRES32=r1, @ANYBLOB], 0x14c4}, {&(0x7f0000001b40)={0x13a8, 0x1e, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@generic="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", @nested={0x4, 0x117}, @nested={0x1f1, 0xb6, 0x0, 0x1, [@nested={0x4, 0x78}, @typed={0x8, 0x129, 0x0, 0x0, @pid}, @typed={0x7, 0x79, 0x0, 0x0, @str=',:\x00'}, @nested={0x4, 0x8d}, @nested={0x4, 0xfe}, @generic="e2e7db7036736dd4c0f7fd70fec4e33b0f670e3d2e91de8e4a17738e847d9240b7445d13c5c561e494fdf600488e6a1d1867c1274867c22cef62ef4b83b2c6890776da92463031dfe7b674ddf01296439280d2392a86fa7cf13c349214aa5908312e966ccfae8135de988ceba18a7f310a1ade63b66e57bdba7e8b8d29eca685df39e3e08736a7f742b2578cf529b18f96a70690f6bbe9efaa41990e2fcc87f1a7b51a56e266166cbce975590625ff7483359123144adbce4b190c31490b5f573547da698fd3860eae7c2e4f2ed337b4e20184cf3f7405f53dc1ab5b1e5b8b85a2b6", @generic="f4b809dc090f1765b1cd9dc7af303326c4e1d770cb6b236e4bd5016d7505e4e70f7962a13563fb4d22fc51ba3b6356b0e5c09a28d3e742362718977519fe0540efd9e326bf29db119ac4e21be4e8daf3e7f8498f37255a960ddae259adad57f4ff57d34a57e290a660d1440a39cca6cefafd8ebd8ee22d456c38d7ee4dcae227e880f102b6a56af6f916b673d54a1896af3541d29bbd16079db14c4469eee00242dfad2ee2b5bbf0c2c57faa2bf2c73f4ae4073a0d9f9c615ea5087b53a674e7477e7aacae64f839174c4da96dadae57b0784e9f731fc096f2c1bba8609c083dcdf0a1b2cb21023942f49691551fa4"]}, @nested={0xea, 0x1, 0x0, 0x1, [@typed={0xb8, 0x4d, 0x0, 0x0, @binary="7064b3ac7c5313717db3d8b8d6c87bf8ead4994f2a2e78af117508bf626bf32405e44d537b02b01f60345b86e374a133c8ca3ef9dd6b004938d4733cd7bbc268c0d496a0995bb3a8cf38c0fcb3741df9197d8cfe521a9a5cec93886d607011760a9e4a83ec4af9c6f87488a1a49d942d0e43b32ce5a903193ccebe86bbffe1f128a8483efc8af8740576cb0875452ae88839cdfad1e910def793ca3fc89c05a572bbcab406903748c56fcf0f1e2e396db64bcdf6"}, @generic="ccbeaeeb90aff8a238884e8dd1fae1c470b7e14179a3931f7d7c3fd97d5cd8e656e72c5ec04b1523cbd5", @nested={0x4, 0x6d}]}, @nested={0x7a, 0x40, 0x0, 0x1, [@generic="85334a05930a30ce66d753428f8d3d3c620b69c7d2357987ea70c12d2fcea1f75f58cfe04d42c28bdfc021cb93b5ff845d1a942de59284a66ee2d8b532a3746b7cad3f7eacab754e2d1135e733da1df446764c5db74ba861d914ca0bcada", @typed={0x8, 0x3e, 0x0, 0x0, @pid}, @nested={0x4, 0x124}, @nested={0x4, 0x14d}, @typed={0x8, 0x31, 0x0, 0x0, @fd=r4}]}, @nested={0x30, 0x43, 0x0, 0x1, [@typed={0x14, 0x22, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0xf9, 0x0, 0x0, @u32}, @nested={0x4, 0x110}, @typed={0x8, 0x14, 0x0, 0x0, @pid}, @nested={0x4, 0x28}]}, @typed={0x8, 0x1c, 0x0, 0x0, @pid}]}, 0x13a8}], 0x2, &(0x7f0000003100)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r4, r4, 0xffffffffffffffff, r6, 0xffffffffffffffff, r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r6, r6, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r4]}}], 0xa8, 0x40}, 0x5) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x41) 2m3.740984072s ago: executing program 1 (id=3144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x24060400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000091430012b77bc266c2b106c9cd150ad22d226a8c7e020bfe6afd357902c2dbd7f"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c0004"], 0x160}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={0x0, 0xffffff13, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) getsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000000080)=0x1000, &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01230200000000000a000200ffffffffffff000008000500", @ANYRES32=r11, @ANYBLOB="08001ed25c000000"], 0x3c}, 0x1, 0xba01}, 0x810) 2m3.10076921s ago: executing program 0 (id=3147): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@loopback, @initdev}, &(0x7f0000000100)=0x8) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e24, 0xe417, @mcast1, 0x5}, {0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10001}, 0xffffffffffffffff, {[0x93, 0x1ff, 0xd, 0x9, 0xe, 0x8000, 0x0, 0x4]}}, 0x5c) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000240)={0xe, @random="2fd85e6a256a"}) sendmsg$NFT_BATCH(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 2m3.04335384s ago: executing program 1 (id=3148): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x440000c4}, 0x44050) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x64, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0xfe7c, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a40300001e0a05010000000000000000070000070900020073797a31000000000900010073797a300000000078030380740300800800034000000002680301802c00"], 0x428}}, 0x40088) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000080)={r5, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x3}, &(0x7f0000000280)=0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(r6, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[], 0x8) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r9, &(0x7f0000000180), 0x4000190, 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async, rerun: 32) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r11, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x18}}], 0x1, 0x400c844) (async, rerun: 32) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r3, &(0x7f0000000e00), 0x0, 0x0) 2m2.948171618s ago: executing program 2 (id=3149): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x19) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x19) (async) 2m2.837766576s ago: executing program 0 (id=3150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000080)=""/252, &(0x7f0000000180)=0xfc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x0, 'hsr0\x00', {}, 0xfff7}) 2m2.759487078s ago: executing program 1 (id=3151): unshare(0x20000400) r0 = socket(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x110, r1, 0x4000) mmap(&(0x7f0000f96000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2m1.200196058s ago: executing program 0 (id=3152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6c08}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, 0x1411, 0x2, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x14000800}, 0x4cee6d5849b862d3) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 2m1.199766532s ago: executing program 1 (id=3153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x1, 0x1, 0x0, 0x8, 0x101, 0x81}, @eth={@local, @empty, @void, {@arp={0x806, @generic={0x136, 0x19, 0x6, 0x7, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x935e3cff217eef56}, "2408a12c66632f", @link_local, "493354b366d0cc"}}}}}, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/73, 0x49}, {0x0}, {0x0}], 0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="0d000000010001", 0x7) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 2m1.090655345s ago: executing program 2 (id=3154): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async, rerun: 64) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) 2m0.818060095s ago: executing program 2 (id=3155): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x4, @any, 0x0, 0x1}, 0xe) (async) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0xcc}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa0800450800340000000002069078000000000000000000104e26", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c2000190780000080a0000005af2a174f5d1a2"], 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7dc1121ab30a05db, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmsg$nl_route(r4, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)=@RTM_NEWMDB={0xf8, 0x54, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x1, {@ip4=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x7, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe8c54d706fdd1e9d}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0xf4fcb871677146f5, 0x1, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) (async) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b70300000000ff80850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r9}, 0x10) (async) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) (async, rerun: 64) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000340)=0x1, 0x12) (async) write$cgroup_int(r11, &(0x7f00000000c0), 0x12) 2m0.748260028s ago: executing program 0 (id=3156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r4, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000504fcff", 0x58}], 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080) 2m0.71070212s ago: executing program 2 (id=3157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x80) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) 1m59.806245252s ago: executing program 2 (id=3158): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x3, 0x2, 0x5, 0x500, 0xb7, 0xc20022}) 1m59.648329311s ago: executing program 1 (id=3159): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1f, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m59.552523883s ago: executing program 1 (id=3160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) close(0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r5, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) r6 = socket$kcm(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000700)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = socket(0x2e, 0x6, 0x80000) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000000c0)={r6, 0x9, 0x8, 0x6}) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x1, 0x7, 0x801, 0x0, 0x0, {0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) 1m56.094306371s ago: executing program 2 (id=3161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) sendto$inet6(r3, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x1fc, 0xfffffffe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m46.104092683s ago: executing program 32 (id=3083): socket$netlink(0x10, 0x3, 0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)=0x4010, 0x4) (async, rerun: 64) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async, rerun: 32) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x1, {0x1, 0x1}, {0x2, 0x0, 0x2}, 0x0, 0xff}, {0x2, 0x2, {0x0, 0xff, 0x4}, {0x0, 0x1, 0x1}, 0xfe, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x2}}, {0x3, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x5}, 0x0, 0xff}, {0x3, 0x2, {0x0, 0xff, 0x3}, {0x2, 0x1, 0x2}, 0x0, 0xfe}], 0xa0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) 0s ago: executing program 33 (id=3156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r4, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000504fcff", 0x58}], 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080) kernel console output (not intermixed with test programs): ][T13814] ? is_valid_gup_args+0x11f/0x200 [ 287.339283][T13814] ? get_user_pages_fast+0x4d/0xb0 [ 287.339306][T13814] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 287.339330][T13814] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 287.339355][T13814] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 287.339378][T13814] ? wait_for_space+0x24d/0x2d0 [ 287.339401][T13814] iov_iter_get_pages2+0x5e/0xa0 [ 287.339420][T13814] __se_sys_vmsplice+0x548/0x10d0 [ 287.339447][T13814] ? futex_private_hash_put+0x4b/0x280 [ 287.339468][T13814] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 287.339492][T13814] ? __pfx_futex_wake+0x10/0x10 [ 287.339583][T13814] ? rcu_is_watching+0x15/0xb0 [ 287.339603][T13814] ? rcu_is_watching+0x15/0xb0 [ 287.339628][T13814] do_syscall_64+0xfa/0x3b0 [ 287.339645][T13814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.339663][T13814] ? clear_bhb_loop+0x60/0xb0 [ 287.339682][T13814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.339700][T13814] RIP: 0033:0x7f016a38ebe9 [ 287.339716][T13814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.339744][T13814] RSP: 002b:00007f016b1f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 287.339764][T13814] RAX: ffffffffffffffda RBX: 00007f016a5b5fa0 RCX: 00007f016a38ebe9 [ 287.339778][T13814] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 287.339789][T13814] RBP: 00007f016a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 287.339800][T13814] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 287.339811][T13814] R13: 00007f016a5b6038 R14: 00007f016a5b5fa0 R15: 00007ffce2696b58 [ 287.339833][T13814] [ 287.728437][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2068'. [ 287.811548][T13844] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2069'. [ 287.886925][T13850] tipc: Resetting bearer [ 287.907006][T13850] syzkaller0: left promiscuous mode [ 287.912869][T13850] syzkaller0: left allmulticast mode [ 287.922754][T13850] ipvlan0: left promiscuous mode [ 287.967193][T13850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2074'. [ 287.977044][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2074'. [ 287.989882][T13850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2074'. [ 288.012767][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2074'. [ 288.077800][T13865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2076'. [ 288.828502][T13894] tipc: Enabling of bearer rejected, already enabled [ 288.839487][T13894] syzkaller0: entered promiscuous mode [ 288.855484][T13894] syzkaller0: entered allmulticast mode [ 288.927744][T13894] sch_tbf: burst 0 is lower than device geneve1 mtu (1514) ! [ 289.030176][T13920] netlink: 'syz.1.2095': attribute type 2 has an invalid length. [ 289.203676][T13917] nbd2: detected capacity change from 0 to 127 [ 289.218101][ T5182] block nbd2: Receive control failed (result -32) [ 289.224684][ T5865] block nbd2: Receive control failed (result -32) [ 289.297518][T13946] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 290.034930][T14030] macsec2: entered promiscuous mode [ 290.040269][T14030] ip6gretap0: entered promiscuous mode [ 290.048731][T14030] macsec2: entered allmulticast mode [ 290.055606][T14030] ip6gretap0: entered allmulticast mode [ 290.218781][T14038] can: request_module (can-proto-0) failed. [ 290.225945][ T8985] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.237583][ T8985] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.247778][ T8985] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.259491][ T8985] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.367621][T14063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.374800][T14065] bond4: option mode: unable to set because the bond device is up [ 290.389178][T14063] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 290.397972][T14063] bond4: (slave macvlan0): Enslaving as a backup interface with a down link [ 290.417432][T14065] bond4: (slave macvlan1): Error -98 calling set_mac_address [ 290.484710][T14063] team0: Port device netdevsim0 removed [ 290.512085][T14063] bond4: (slave macvlan0): Releasing backup interface [ 290.809194][T14110] tipc: New replicast peer: 255.255.255.255 [ 290.826806][T14110] tipc: Enabled bearer , priority 10 [ 290.938343][T14122] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 291.095450][T14123] validate_nla: 5 callbacks suppressed [ 291.095468][T14123] netlink: 'syz.4.2145': attribute type 10 has an invalid length. [ 291.341259][T14141] tipc: Enabled bearer , priority 0 [ 291.361777][T14141] syzkaller0: entered promiscuous mode [ 291.376045][T14141] syzkaller0: entered allmulticast mode [ 291.397484][T14141] tipc: Resetting bearer [ 291.416088][T14140] tipc: Resetting bearer [ 291.427859][T14140] tipc: Disabling bearer [ 291.487181][ T5182] Bluetooth: hci3: command 0x0405 tx timeout [ 291.640423][T14169] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 291.648333][T14169] CPU: 1 UID: 0 PID: 14169 Comm: syz.3.2156 Not tainted syzkaller #0 PREEMPT(full) [ 291.648359][T14169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.648370][T14169] Call Trace: [ 291.648377][T14169] [ 291.648392][T14169] dump_stack_lvl+0x189/0x250 [ 291.648427][T14169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.648447][T14169] ? __pfx__printk+0x10/0x10 [ 291.648468][T14169] ? kernfs_root+0x1c/0x230 [ 291.648488][T14169] ? kernfs_path_from_node+0x2f/0x290 [ 291.648507][T14169] ? kernfs_path_from_node+0x250/0x290 [ 291.648524][T14169] ? kernfs_path_from_node+0x2f/0x290 [ 291.648545][T14169] sysfs_warn_dup+0x8e/0xa0 [ 291.648562][T14169] sysfs_do_create_link_sd+0xc0/0x110 [ 291.648582][T14169] device_add_class_symlinks+0x1cf/0x240 [ 291.648602][T14169] device_add+0x475/0xb50 [ 291.648620][T14169] wiphy_register+0x1ba6/0x28d0 [ 291.648651][T14169] ? __pfx_wiphy_register+0x10/0x10 [ 291.648674][T14169] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 291.648696][T14169] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 291.648726][T14169] ieee80211_register_hw+0x3425/0x4080 [ 291.648758][T14169] ? ieee80211_register_hw+0x14e1/0x4080 [ 291.648785][T14169] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 291.648812][T14169] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.648838][T14169] ? __hrtimer_setup+0x187/0x210 [ 291.648855][T14169] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 291.648880][T14169] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 291.648914][T14169] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 291.648935][T14169] ? trace_kmalloc+0x1f/0xd0 [ 291.648959][T14169] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 291.648982][T14169] ? kstrndup+0xbf/0x160 [ 291.649004][T14169] hwsim_new_radio_nl+0xea4/0x1b10 [ 291.649026][T14169] ? __pfx___nla_validate_parse+0x10/0x10 [ 291.649057][T14169] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 291.649084][T14169] ? __nla_parse+0x40/0x60 [ 291.649108][T14169] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 291.649132][T14169] genl_family_rcv_msg_doit+0x215/0x300 [ 291.649155][T14169] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 291.649181][T14169] ? bpf_lsm_capable+0x9/0x20 [ 291.649203][T14169] ? security_capable+0x7e/0x2e0 [ 291.649230][T14169] genl_rcv_msg+0x60e/0x790 [ 291.649252][T14169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.649270][T14169] ? __kasan_slab_alloc+0x6c/0x80 [ 291.649291][T14169] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 291.649313][T14169] ? __netlink_lookup+0xbd/0x810 [ 291.649328][T14169] ? rcu_is_watching+0x15/0xb0 [ 291.649350][T14169] netlink_rcv_skb+0x205/0x470 [ 291.649373][T14169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.649399][T14169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.649428][T14169] ? lock_release+0x4b/0x3e0 [ 291.649453][T14169] ? down_read+0x1ad/0x2e0 [ 291.649470][T14169] genl_rcv+0x28/0x40 [ 291.649487][T14169] netlink_unicast+0x82c/0x9e0 [ 291.649513][T14169] ? __pfx_netlink_unicast+0x10/0x10 [ 291.649535][T14169] ? netlink_sendmsg+0x642/0xb30 [ 291.649550][T14169] ? skb_put+0x11b/0x210 [ 291.649568][T14169] netlink_sendmsg+0x805/0xb30 [ 291.649588][T14169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.649603][T14169] ? futex_unqueue+0x22/0x240 [ 291.649620][T14169] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.649637][T14169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.649655][T14169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.649671][T14169] __sock_sendmsg+0x21c/0x270 [ 291.649695][T14169] ____sys_sendmsg+0x505/0x830 [ 291.649715][T14169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.649737][T14169] ? import_iovec+0x74/0xa0 [ 291.649758][T14169] ___sys_sendmsg+0x21f/0x2a0 [ 291.649777][T14169] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.649798][T14169] ? futex_wait+0x285/0x360 [ 291.649832][T14169] ? __fget_files+0x2a/0x420 [ 291.649847][T14169] ? __fget_files+0x3a0/0x420 [ 291.649864][T14169] __x64_sys_sendmsg+0x19b/0x260 [ 291.649883][T14169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.649906][T14169] ? rcu_is_watching+0x15/0xb0 [ 291.649924][T14169] ? rcu_is_watching+0x15/0xb0 [ 291.649942][T14169] do_syscall_64+0xfa/0x3b0 [ 291.649959][T14169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.649976][T14169] ? clear_bhb_loop+0x60/0xb0 [ 291.649995][T14169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.650013][T14169] RIP: 0033:0x7f4e22b8ebe9 [ 291.650029][T14169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.650045][T14169] RSP: 002b:00007f4e23a04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.650065][T14169] RAX: ffffffffffffffda RBX: 00007f4e22db6090 RCX: 00007f4e22b8ebe9 [ 291.650079][T14169] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 291.650090][T14169] RBP: 00007f4e22c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 291.650101][T14169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.650112][T14169] R13: 00007f4e22db6128 R14: 00007f4e22db6090 R15: 00007ffc9f442c58 [ 291.650132][T14169] [ 292.138843][ T5970] tipc: Node number set to 809299218 [ 292.153647][T14168] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 292.161401][T14168] CPU: 1 UID: 0 PID: 14168 Comm: syz.3.2156 Not tainted syzkaller #0 PREEMPT(full) [ 292.161423][T14168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.161434][T14168] Call Trace: [ 292.161439][T14168] [ 292.161446][T14168] dump_stack_lvl+0x189/0x250 [ 292.161471][T14168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.161489][T14168] ? __pfx__printk+0x10/0x10 [ 292.161508][T14168] ? kernfs_root+0x1c/0x230 [ 292.161527][T14168] ? kernfs_path_from_node+0x2f/0x290 [ 292.161542][T14168] ? kernfs_path_from_node+0x250/0x290 [ 292.161558][T14168] ? kernfs_path_from_node+0x2f/0x290 [ 292.161575][T14168] sysfs_warn_dup+0x8e/0xa0 [ 292.161590][T14168] sysfs_do_create_link_sd+0xc0/0x110 [ 292.161608][T14168] device_add_class_symlinks+0x1cf/0x240 [ 292.161628][T14168] device_add+0x475/0xb50 [ 292.161646][T14168] wiphy_register+0x1ba6/0x28d0 [ 292.161678][T14168] ? __pfx_wiphy_register+0x10/0x10 [ 292.161700][T14168] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 292.161723][T14168] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 292.161744][T14168] ieee80211_register_hw+0x3425/0x4080 [ 292.161770][T14168] ? ieee80211_register_hw+0x14e1/0x4080 [ 292.161793][T14168] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 292.161814][T14168] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.161839][T14168] ? __hrtimer_setup+0x187/0x210 [ 292.161854][T14168] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 292.161880][T14168] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 292.161914][T14168] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 292.161934][T14168] ? trace_kmalloc+0x1f/0xd0 [ 292.161955][T14168] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 292.161978][T14168] ? kstrndup+0xbf/0x160 [ 292.161999][T14168] hwsim_new_radio_nl+0xea4/0x1b10 [ 292.162021][T14168] ? __pfx___nla_validate_parse+0x10/0x10 [ 292.162052][T14168] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 292.162076][T14168] ? __nla_parse+0x40/0x60 [ 292.162100][T14168] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 292.162125][T14168] genl_family_rcv_msg_doit+0x215/0x300 [ 292.162149][T14168] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 292.162174][T14168] ? bpf_lsm_capable+0x9/0x20 [ 292.162196][T14168] ? security_capable+0x7e/0x2e0 [ 292.162222][T14168] genl_rcv_msg+0x60e/0x790 [ 292.162244][T14168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.162262][T14168] ? __kasan_slab_alloc+0x6c/0x80 [ 292.162284][T14168] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 292.162305][T14168] ? __netlink_lookup+0xbd/0x810 [ 292.162328][T14168] ? rcu_is_watching+0x15/0xb0 [ 292.162350][T14168] netlink_rcv_skb+0x205/0x470 [ 292.162374][T14168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.162394][T14168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.162422][T14168] ? lock_release+0x4b/0x3e0 [ 292.162451][T14168] ? down_read+0x1ad/0x2e0 [ 292.162468][T14168] genl_rcv+0x28/0x40 [ 292.162485][T14168] netlink_unicast+0x82c/0x9e0 [ 292.162511][T14168] ? __pfx_netlink_unicast+0x10/0x10 [ 292.162533][T14168] ? netlink_sendmsg+0x642/0xb30 [ 292.162547][T14168] ? skb_put+0x11b/0x210 [ 292.162564][T14168] netlink_sendmsg+0x805/0xb30 [ 292.162583][T14168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.162600][T14168] ? aa_sock_msg_perm+0xf1/0x1d0 [ 292.162615][T14168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.162630][T14168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.162660][T14168] __sock_sendmsg+0x21c/0x270 [ 292.162682][T14168] ____sys_sendmsg+0x505/0x830 [ 292.162702][T14168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.162736][T14168] ? import_iovec+0x74/0xa0 [ 292.162756][T14168] ___sys_sendmsg+0x21f/0x2a0 [ 292.162781][T14168] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.162802][T14168] ? futex_wake+0x4b2/0x560 [ 292.162836][T14168] ? __fget_files+0x2a/0x420 [ 292.162850][T14168] ? __fget_files+0x3a0/0x420 [ 292.162867][T14168] __x64_sys_sendmsg+0x19b/0x260 [ 292.162905][T14168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.162928][T14168] ? rcu_is_watching+0x15/0xb0 [ 292.162947][T14168] ? rcu_is_watching+0x15/0xb0 [ 292.162965][T14168] do_syscall_64+0xfa/0x3b0 [ 292.162981][T14168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.162999][T14168] ? clear_bhb_loop+0x60/0xb0 [ 292.163017][T14168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.163035][T14168] RIP: 0033:0x7f4e22b8ebe9 [ 292.163051][T14168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.163066][T14168] RSP: 002b:00007f4e23a25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.163085][T14168] RAX: ffffffffffffffda RBX: 00007f4e22db5fa0 RCX: 00007f4e22b8ebe9 [ 292.163097][T14168] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 292.163108][T14168] RBP: 00007f4e22c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 292.163119][T14168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.163134][T14168] R13: 00007f4e22db6038 R14: 00007f4e22db5fa0 R15: 00007ffc9f442c58 [ 292.163154][T14168] [ 292.718468][T14180] netlink: 'syz.1.2160': attribute type 9 has an invalid length. [ 292.738819][T14182] __nla_validate_parse: 19 callbacks suppressed [ 292.738837][T14182] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2163'. [ 292.775678][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2161'. [ 292.787681][T14182] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2163'. [ 292.798744][T14180] netlink: 'syz.1.2160': attribute type 6 has an invalid length. [ 292.865098][T14182] wlan1 speed is unknown, defaulting to 1000 [ 293.107251][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2166'. [ 293.212748][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2166'. [ 293.242760][T14207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2166'. [ 293.324234][T14210] !: renamed from dummy0 [ 293.379865][T14214] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2169'. [ 293.627935][T14224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2172'. [ 293.649756][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 293.655586][T14224] tipc: Cannot configure node identity twice [ 293.664749][T14224] tipc: Cannot configure node identity twice [ 293.695660][T14224] ip6tnl2: entered promiscuous mode [ 293.700970][T14224] ip6tnl2: entered allmulticast mode [ 293.710728][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2172'. [ 293.872475][T14247] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 293.907120][T14237] wlan1 speed is unknown, defaulting to 1000 [ 293.919002][T14248] wlan1 speed is unknown, defaulting to 1000 [ 293.936906][T14238] wlan1 speed is unknown, defaulting to 1000 [ 294.455301][T14281] tipc: Enabling of bearer rejected, already enabled [ 294.479023][T14282] tipc: Enabling of bearer rejected, already enabled [ 295.221314][T14335] syzkaller0: entered promiscuous mode [ 295.228973][T14335] syzkaller0: entered allmulticast mode [ 295.536606][T14360] syzkaller1: entered allmulticast mode [ 295.701061][T14363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.710510][T14363] bridge0: port 1(bond5) entered blocking state [ 295.719966][T14363] bridge0: port 1(bond5) entered disabled state [ 295.728814][T14363] bond5: entered allmulticast mode [ 295.737733][T14363] bond5: entered promiscuous mode [ 295.817642][T14376] netlink: 'syz.1.2212': attribute type 11 has an invalid length. [ 295.907079][T14386] netlink: 'syz.1.2215': attribute type 58 has an invalid length. [ 295.925933][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.934216][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.585853][T14409] sctp: [Deprecated]: syz.2.2221 (pid 14409) Use of int in maxseg socket option. [ 296.585853][T14409] Use struct sctp_assoc_value instead [ 296.610499][T14409] team0: No ports can be present during mode change [ 296.660157][T14418] netlink: 'syz.3.2225': attribute type 10 has an invalid length. [ 296.669823][T14419] netlink: 'syz.3.2225': attribute type 10 has an invalid length. [ 296.786179][T14430] batadv0: entered promiscuous mode [ 296.791501][T14430] batadv0: entered allmulticast mode [ 296.847929][T14423] team0: entered allmulticast mode [ 296.857459][T14423] dummy0: entered allmulticast mode [ 296.894689][T14430] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.019892][T14450] tipc: Failed to remove unknown binding: 66,1,1/0:1190091264/1190091266 [ 297.091677][T14457] syzkaller1: entered promiscuous mode [ 297.097552][T14457] syzkaller1: entered allmulticast mode [ 297.127431][T14459] geneve4: entered promiscuous mode [ 297.133872][ T8984] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.153037][ T8984] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.175453][ T8984] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.195441][ T8984] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.669282][T14488] netlink: 'syz.0.2245': attribute type 2 has an invalid length. [ 297.847996][T14498] tipc: Enabling of bearer rejected, already enabled [ 298.251494][T14529] wlan1 speed is unknown, defaulting to 1000 [ 298.435672][T14544] netlink: 'syz.3.2258': attribute type 3 has an invalid length. [ 298.444195][T14544] __nla_validate_parse: 16 callbacks suppressed [ 298.444211][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 298.524276][T14549] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 298.626464][T14556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2261'. [ 299.155197][T14585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2271'. [ 299.164539][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2270'. [ 299.205268][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2271'. [ 299.248029][T14588] wlan1 speed is unknown, defaulting to 1000 [ 299.254228][T14585] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2271'. [ 299.281454][T14585] netlink: 'syz.3.2271': attribute type 3 has an invalid length. [ 299.302310][T14585] netlink: 'syz.3.2271': attribute type 2 has an invalid length. [ 299.310154][T14585] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2271'. [ 299.319226][T14585] netlink: 'syz.3.2271': attribute type 2 has an invalid length. [ 299.701154][T14616] tipc: Enabled bearer , priority 0 [ 299.708735][T14616] syzkaller0: entered promiscuous mode [ 299.715133][T14616] syzkaller0: entered allmulticast mode [ 299.716631][T14618] netlink: 'syz.1.2280': attribute type 9 has an invalid length. [ 299.735618][T14616] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 299.740825][T14618] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2280'. [ 299.757022][T14616] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 299.771819][T14616] tipc: Resetting bearer [ 299.781829][T14615] tipc: Resetting bearer [ 299.789420][T14615] tipc: Disabling bearer [ 299.829564][T14621] wlan1 speed is unknown, defaulting to 1000 [ 299.950199][T14629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2284'. [ 299.962291][T14629] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2284'. [ 300.052095][T14637] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001 [ 300.059910][T14637] openvswitch: netlink: IP tunnel dst address not specified [ 300.137201][T14638] netlink: 'syz.1.2287': attribute type 4 has an invalid length. [ 300.187997][T14642] syzkaller1: entered allmulticast mode [ 300.317869][T14657] batman_adv: batadv0: Adding interface: ip6gretap3 [ 300.360569][T14657] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.432120][T14657] batman_adv: batadv0: Interface activated: ip6gretap3 [ 300.453523][T14670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.470074][T14670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.591333][T14681] tipc: Enabled bearer , priority 0 [ 300.621188][T14687] netlink: 'syz.4.2303': attribute type 17 has an invalid length. [ 300.816442][T14687] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 300.880072][T14693] geneve3: entered promiscuous mode [ 301.048716][T14712] bond5: left allmulticast mode [ 301.064956][T14712] bond5: left promiscuous mode [ 301.070186][T14712] bridge0: port 1(bond5) entered disabled state [ 301.090590][T14709] tipc: Enabled bearer , priority 0 [ 301.098122][T14709] syzkaller0: entered promiscuous mode [ 301.111081][T14709] syzkaller0: entered allmulticast mode [ 301.127761][T14708] tipc: Resetting bearer [ 301.156003][T14708] tipc: Disabling bearer [ 301.165348][T14725] bridge0: port 1(erspan0) entered blocking state [ 301.171848][T14725] bridge0: port 1(erspan0) entered disabled state [ 301.178849][T14725] erspan0: entered allmulticast mode [ 301.185407][T14725] erspan0: entered promiscuous mode [ 301.227771][T14733] syzkaller1: entered promiscuous mode [ 301.233357][T14733] syzkaller1: entered allmulticast mode [ 301.552976][T14757] nbd: socks must be embedded in a SOCK_ITEM attr [ 301.560785][T14757] block nbd3: shutting down sockets [ 301.722132][T14775] validate_nla: 1 callbacks suppressed [ 301.722150][T14775] netlink: 'syz.3.2325': attribute type 21 has an invalid length. [ 301.771797][T14775] netlink: 'syz.3.2325': attribute type 5 has an invalid length. [ 301.789146][T14779] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 301.805904][T14779] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 301.922239][ T30] audit: type=1804 audit(1756192888.611:3): pid=14786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2328" name="/newroot/459/memory.events" dev="tmpfs" ino=2374 res=1 errno=0 [ 302.014527][ T30] audit: type=1800 audit(1756192888.611:4): pid=14786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2328" name="memory.events" dev="tmpfs" ino=2374 res=0 errno=0 [ 302.085764][T14800] wlan1 speed is unknown, defaulting to 1000 [ 302.228651][T14808] netlink: 'syz.0.2334': attribute type 10 has an invalid length. [ 302.250965][T14808] syz_tun: entered promiscuous mode [ 302.269145][T14808] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 302.310277][T14808] netlink: 'syz.0.2334': attribute type 11 has an invalid length. [ 302.416889][T14816] wlan1 speed is unknown, defaulting to 1000 [ 302.759492][T14834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.881983][T14856] netlink: 'syz.1.2345': attribute type 12 has an invalid length. [ 303.170919][ T8985] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.212013][ T8985] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.244391][T14875] wlan1 speed is unknown, defaulting to 1000 [ 303.251013][ T8985] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.272239][ T8985] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.650757][T14926] syzkaller0: left promiscuous mode [ 303.656039][T14926] syzkaller0: left allmulticast mode [ 303.797804][T14947] tipc: Enabled bearer , priority 0 [ 303.805775][T14947] syzkaller0: entered promiscuous mode [ 303.811344][T14947] syzkaller0: entered allmulticast mode [ 303.821970][T14947] tipc: Resetting bearer [ 303.836297][T14946] tipc: Resetting bearer [ 303.843699][T14946] tipc: Disabling bearer [ 303.892511][T14952] !: renamed from dummy0 [ 304.059013][T14966] wlan1 speed is unknown, defaulting to 1000 [ 304.482498][T14994] __nla_validate_parse: 13 callbacks suppressed [ 304.482517][T14994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2377'. [ 304.567538][T15004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2377'. [ 304.934919][T15034] wlan1 speed is unknown, defaulting to 1000 [ 304.950093][T15037] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2386'. [ 304.978026][T15043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.377917][T15067] team0: left allmulticast mode [ 305.391081][T15067] dummy0: left allmulticast mode [ 305.415543][T15067] tipc: Resetting bearer [ 305.451630][T15070] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2395'. [ 305.481213][ T8985] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.547833][T15073] syzkaller0: entered promiscuous mode [ 305.556535][T15073] syzkaller0: entered allmulticast mode [ 305.564118][ T8985] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.586181][T15070] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2395'. [ 305.595789][ T8985] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.632920][ T8985] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.671955][T15079] wlan1 speed is unknown, defaulting to 1000 [ 305.746622][T15087] veth1_macvtap: left allmulticast mode [ 305.770930][T15087] hsr0: left allmulticast mode [ 305.796855][T15087] hsr_slave_0: left allmulticast mode [ 305.802248][T15087] hsr_slave_1: left allmulticast mode [ 305.815254][T15087] hsr0: left promiscuous mode [ 305.870772][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 305.936862][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 305.956914][ T59] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.970326][ T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.979343][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 306.005249][ T59] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 306.040786][ T59] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.074797][ T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.104614][ T59] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 306.163868][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 306.203375][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2402'. [ 306.214852][ T59] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.236501][ T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.271493][ T59] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 306.320635][ T59] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.347440][ T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.363139][ T59] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 306.417617][T15109] wlan1 speed is unknown, defaulting to 1000 [ 306.485052][T15113] wlan1 speed is unknown, defaulting to 1000 [ 306.716422][T15113] netlink: 'syz.0.2406': attribute type 13 has an invalid length. [ 306.729341][T15113] netlink: 'syz.0.2406': attribute type 17 has an invalid length. [ 306.768990][T15113] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 306.911992][T15132] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 306.988201][T15132] bond6: (slave geneve2): making interface the new active one [ 306.996988][T15132] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 307.005681][ T8975] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 307.017698][ T8975] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 307.036985][ T8975] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 307.046294][ T8975] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 307.140930][T15140] netlink: 'syz.2.2411': attribute type 5 has an invalid length. [ 307.158612][ T8985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.168317][ T8985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.271021][T15156] netlink: 'syz.1.2415': attribute type 8 has an invalid length. [ 307.444288][T15169] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 307.462812][T15169] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 307.510996][T15170] xt_limit: Overflow, try lower: 604147548/4200216962 [ 308.025343][ T8985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.061745][ T8985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.402598][T15247] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 308.449037][T15249] 8021q: adding VLAN 0 to HW filter on device bond6 [ 309.028608][T15283] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 309.082928][T15285] 8021q: VLANs not supported on nlmon0 [ 309.218154][T15290] wlan1 speed is unknown, defaulting to 1000 [ 309.346544][T15297] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 309.381414][T15297] 8021q: adding VLAN 0 to HW filter on device bond6 [ 309.413300][T15302] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 309.485415][T15310] __nla_validate_parse: 6 callbacks suppressed [ 309.485433][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2460'. [ 309.509851][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2460'. [ 309.522238][T15310] netlink: 'syz.1.2460': attribute type 23 has an invalid length. [ 309.600377][T15317] netlink: 'syz.0.2461': attribute type 2 has an invalid length. [ 309.632318][T15322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2464'. [ 309.695364][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 309.707039][T15330] netlink: 'syz.2.2467': attribute type 29 has an invalid length. [ 309.797765][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2468'. [ 309.799803][T15343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.913958][T15352] wlan1 speed is unknown, defaulting to 1000 [ 309.944150][T15354] wlan1 speed is unknown, defaulting to 1000 [ 309.967820][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 309.982545][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2475'. [ 309.991918][T15359] netlink: 'syz.4.2475': attribute type 5 has an invalid length. [ 310.192361][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 310.203551][T15377] syzkaller0: entered promiscuous mode [ 310.209697][T15377] syzkaller0: entered allmulticast mode [ 310.222012][T15375] macvlan0: entered promiscuous mode [ 310.227820][T15375] geneve1: entered promiscuous mode [ 310.233551][T15375] macvlan0: entered allmulticast mode [ 310.238937][T15375] geneve1: entered allmulticast mode [ 310.420133][T15396] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2486'. [ 310.439744][T15395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2486'. [ 311.098902][T15461] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 311.119256][T15461] lo speed is unknown, defaulting to 1000 [ 311.126055][T15461] lo speed is unknown, defaulting to 1000 [ 311.132305][T15461] lo speed is unknown, defaulting to 1000 [ 311.244344][T15461] infiniband s9z0: set down [ 311.249017][ T6415] lo speed is unknown, defaulting to 1000 [ 311.254856][T15461] infiniband s9z0: added lo [ 311.280291][T15461] RDS/IB: s9z0: added [ 311.285525][T15461] smc: adding ib device s9z0 with port count 1 [ 311.291736][T15461] smc: ib device s9z0 port 1 has pnetid [ 311.298102][ T6415] lo speed is unknown, defaulting to 1000 [ 311.304489][T15461] lo speed is unknown, defaulting to 1000 [ 311.407771][T15461] lo speed is unknown, defaulting to 1000 [ 311.505044][T15461] lo speed is unknown, defaulting to 1000 [ 311.621444][T15479] wlan1 speed is unknown, defaulting to 1000 [ 311.621758][T15461] lo speed is unknown, defaulting to 1000 [ 311.726956][T15461] lo speed is unknown, defaulting to 1000 [ 311.802750][ T5182] Bluetooth: hci3: command 0x0405 tx timeout [ 311.943735][T15479] lo speed is unknown, defaulting to 1000 [ 312.736940][T15544] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 312.946279][T15570] rdma_op ffff88807bc861f0 conn xmit_rdma 0000000000000000 [ 312.946310][T15569] rdma_op ffff8880538e51f0 conn xmit_rdma 0000000000000000 [ 312.976738][T15572] syzkaller1: entered promiscuous mode [ 312.983377][T15572] syzkaller1: entered allmulticast mode [ 313.329202][T15583] delete_channel: no stack [ 313.471148][T15602] tap0: tun_chr_ioctl cmd 1074025673 [ 313.780583][T15624] wlan1 speed is unknown, defaulting to 1000 [ 313.831658][T15624] lo speed is unknown, defaulting to 1000 [ 314.235222][T15652] validate_nla: 7 callbacks suppressed [ 314.235240][T15652] netlink: 'syz.1.2558': attribute type 21 has an invalid length. [ 314.684780][T15667] __nla_validate_parse: 25 callbacks suppressed [ 314.684799][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2561'. [ 314.756945][T15675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.847887][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2566'. [ 314.876463][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2566'. [ 314.928215][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 314.943918][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2572'. [ 314.998133][T15703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2573'. [ 315.032016][T15703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2573'. [ 315.118758][T15723] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2577'. [ 315.130383][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.144948][T15721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2578'. [ 315.171583][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.361195][T15741] netlink: 'syz.3.2582': attribute type 1 has an invalid length. [ 315.540567][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2591'. [ 315.691465][T15784] wlan1 speed is unknown, defaulting to 1000 [ 315.698563][T15784] lo speed is unknown, defaulting to 1000 [ 316.087256][T15794] netlink: 'syz.4.2596': attribute type 6 has an invalid length. [ 316.219630][T15819] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 316.233821][T15818] unsupported nla_type 52263 [ 316.276543][T15814] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.449956][T15831] netlink: 'syz.0.2609': attribute type 7 has an invalid length. [ 316.639815][T15842] bond0: default FDB implementation only supports local addresses [ 316.858833][T15861] batadv1: entered promiscuous mode [ 316.890364][T15864] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 316.945264][T15866] wlan1 speed is unknown, defaulting to 1000 [ 316.951835][T15866] lo speed is unknown, defaulting to 1000 [ 317.006746][T15869] geneve3: entered allmulticast mode [ 317.028125][ T8975] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.069580][ T8975] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.085628][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.117202][ T8975] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.182826][ T8975] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.252972][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.919587][T15939] tap0: tun_chr_ioctl cmd 1074025675 [ 317.927317][T15939] tap0: persist disabled [ 318.159278][T15953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.166759][T15953] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 318.270613][T15961] netlink: 'syz.4.2646': attribute type 5 has an invalid length. [ 318.282888][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 318.434435][T15971] tipc: Enabled bearer , priority 0 [ 318.472508][T15971] tipc: Disabling bearer [ 318.496308][T15979] netlink: 'syz.3.2652': attribute type 12 has an invalid length. [ 318.641889][T15989] bond6: (slave wlan0): Releasing active interface [ 318.734867][T15998] wlan1 speed is unknown, defaulting to 1000 [ 318.742140][T15998] lo speed is unknown, defaulting to 1000 [ 318.786227][T16004] netlink: 'syz.2.2659': attribute type 10 has an invalid length. [ 318.820435][T16004] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 318.871154][ T4047] wlan1 speed is unknown, defaulting to 1000 [ 318.879767][ T6415] wlan1 speed is unknown, defaulting to 1000 [ 319.147716][T16026] netlink: 'syz.1.2663': attribute type 2 has an invalid length. [ 319.269746][T16030] sch_tbf: burst 0 is lower than device tunl0 mtu (216) ! [ 319.322737][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.389170][T16035] FAULT_INJECTION: forcing a failure. [ 319.389170][T16035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.431172][T16035] CPU: 0 UID: 0 PID: 16035 Comm: syz.3.2664 Not tainted syzkaller #0 PREEMPT(full) [ 319.431197][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.431207][T16035] Call Trace: [ 319.431213][T16035] [ 319.431219][T16035] dump_stack_lvl+0x189/0x250 [ 319.431244][T16035] ? __pfx____ratelimit+0x10/0x10 [ 319.431267][T16035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.431285][T16035] ? __pfx__printk+0x10/0x10 [ 319.431305][T16035] ? __might_fault+0xb0/0x130 [ 319.431327][T16035] ? lock_release+0x4b/0x3e0 [ 319.431349][T16035] ? vfs_write+0x956/0xb30 [ 319.431369][T16035] ? rcu_is_watching+0x15/0xb0 [ 319.431384][T16035] should_fail_ex+0x414/0x560 [ 319.431407][T16035] _copy_from_user+0x2d/0xb0 [ 319.431448][T16035] __sys_connect+0x123/0x440 [ 319.431471][T16035] ? __fget_files+0x3a0/0x420 [ 319.431485][T16035] ? __pfx___sys_connect+0x10/0x10 [ 319.431512][T16035] ? __pfx_ksys_write+0x10/0x10 [ 319.431531][T16035] ? rcu_is_watching+0x15/0xb0 [ 319.431548][T16035] __x64_sys_connect+0x7a/0x90 [ 319.431571][T16035] do_syscall_64+0xfa/0x3b0 [ 319.431586][T16035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.431600][T16035] ? clear_bhb_loop+0x60/0xb0 [ 319.431618][T16035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.431634][T16035] RIP: 0033:0x7f4e22b8ebe9 [ 319.431649][T16035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.431664][T16035] RSP: 002b:00007f4e239e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 319.431681][T16035] RAX: ffffffffffffffda RBX: 00007f4e22db6180 RCX: 00007f4e22b8ebe9 [ 319.431694][T16035] RDX: 000000000000001c RSI: 0000200000000300 RDI: 0000000000000003 [ 319.431705][T16035] RBP: 00007f4e239e3090 R08: 0000000000000000 R09: 0000000000000000 [ 319.431717][T16035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.431726][T16035] R13: 00007f4e22db6218 R14: 00007f4e22db6180 R15: 00007ffc9f442c58 [ 319.431746][T16035] [ 319.760311][T16052] tipc: Enabling of bearer rejected, already enabled [ 319.798533][T16046] syz_tun: entered allmulticast mode [ 319.807258][T16056] __nla_validate_parse: 19 callbacks suppressed [ 319.807275][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2672'. [ 319.811260][T16046] dvmrp8: entered allmulticast mode [ 319.839522][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'. [ 319.860036][T16056] tipc: Enabled bearer , priority 10 [ 319.881547][T16045] syz_tun: left allmulticast mode [ 319.892493][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'. [ 319.904748][T16045] dvmrp8: left allmulticast mode [ 319.928262][T16065] gre2: entered allmulticast mode [ 319.977147][T16071] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.011974][T16071] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.128836][T16077] vlan0: entered allmulticast mode [ 320.139847][T16077] veth0_to_hsr: entered allmulticast mode [ 320.229353][T16071] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.247528][T16071] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.269642][T16086] gretap1: entered promiscuous mode [ 320.279508][T16086] gretap1: entered allmulticast mode [ 320.362907][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.377517][T16071] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.389951][T16095] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 320.418673][T16071] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.440217][T16095] netlink: 'syz.2.2685': attribute type 4 has an invalid length. [ 320.469855][T16095] tipc: Resetting bearer [ 320.477885][T16095] geneve1: left allmulticast mode [ 320.484628][T16095] geneve1: left promiscuous mode [ 320.494782][T16071] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.507764][T16071] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.573670][ T1154] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.583255][ T1154] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 320.616738][ T1154] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.638589][ T1154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 320.667372][ T1154] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.676418][ T1154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 320.694150][ T6089] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.709869][T16111] netlink: 'syz.2.2687': attribute type 13 has an invalid length. [ 320.710377][ T6089] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 320.726567][T16111] netlink: 'syz.2.2687': attribute type 17 has an invalid length. [ 320.740210][T16105] tipc: Enabled bearer , priority 0 [ 320.752035][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'. [ 320.762030][T16112] syzkaller0: entered promiscuous mode [ 320.767908][T16111] netlink: 'syz.2.2687': attribute type 27 has an invalid length. [ 320.776979][T16113] FAULT_INJECTION: forcing a failure. [ 320.776979][T16113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.795221][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.4.2689 Not tainted syzkaller #0 PREEMPT(full) [ 320.795244][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.795255][T16113] Call Trace: [ 320.795261][T16113] [ 320.795269][T16113] dump_stack_lvl+0x189/0x250 [ 320.795294][T16113] ? __pfx____ratelimit+0x10/0x10 [ 320.795317][T16113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.795336][T16113] ? __pfx__printk+0x10/0x10 [ 320.795360][T16113] ? rcu_is_watching+0x15/0xb0 [ 320.795379][T16113] should_fail_ex+0x414/0x560 [ 320.795402][T16113] _copy_to_user+0x31/0xb0 [ 320.795422][T16113] simple_read_from_buffer+0xe1/0x170 [ 320.795447][T16113] proc_fail_nth_read+0x1b3/0x220 [ 320.795468][T16113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.795488][T16113] ? rw_verify_area+0x2a6/0x4d0 [ 320.795508][T16113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.795526][T16113] vfs_read+0x1fd/0xa30 [ 320.795552][T16113] ? fdget_pos+0x247/0x320 [ 320.795569][T16113] ? __pfx___mutex_lock+0x10/0x10 [ 320.795584][T16113] ? __pfx_vfs_read+0x10/0x10 [ 320.795607][T16113] ? __fget_files+0x3a0/0x420 [ 320.795621][T16113] ? __fget_files+0x2a/0x420 [ 320.795639][T16113] ksys_read+0x145/0x250 [ 320.795658][T16113] ? __pfx_ksys_read+0x10/0x10 [ 320.795677][T16113] ? rcu_is_watching+0x15/0xb0 [ 320.795695][T16113] ? rcu_is_watching+0x15/0xb0 [ 320.795713][T16113] do_syscall_64+0xfa/0x3b0 [ 320.795729][T16113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.795746][T16113] ? clear_bhb_loop+0x60/0xb0 [ 320.795765][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.795782][T16113] RIP: 0033:0x7f016a38d5fc [ 320.795797][T16113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 320.795812][T16113] RSP: 002b:00007f016b1b3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.795830][T16113] RAX: ffffffffffffffda RBX: 00007f016a5b6180 RCX: 00007f016a38d5fc [ 320.795843][T16113] RDX: 000000000000000f RSI: 00007f016b1b30a0 RDI: 0000000000000005 [ 320.795853][T16113] RBP: 00007f016b1b3090 R08: 0000000000000000 R09: 0000000000000000 [ 320.795863][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.795873][T16113] R13: 00007f016a5b6218 R14: 00007f016a5b6180 R15: 00007ffce2696b58 [ 320.795892][T16113] [ 320.796543][T16112] syzkaller0: entered allmulticast mode [ 320.831952][T16119] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.2690'. [ 321.070601][T16114] wlan1 speed is unknown, defaulting to 1000 [ 321.081825][T16114] lo speed is unknown, defaulting to 1000 [ 321.120117][T16109] tipc: Disabling bearer [ 321.265739][T16111] bridge0: port 1(erspan0) entered blocking state [ 321.272292][T16111] bridge0: port 1(erspan0) entered forwarding state [ 321.285807][T16111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.299214][T16111] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.312565][T16111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.334668][T16126] tipc: Resetting bearer [ 321.355710][ T5970] lo speed is unknown, defaulting to 1000 [ 321.364924][ T5970] s9z0: Port: 1 Link ACTIVE [ 321.376200][T16102] tipc: Resetting bearer [ 321.392435][T16102] tipc: Disabling bearer [ 321.402819][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.417772][ T5970] lo speed is unknown, defaulting to 1000 [ 321.473484][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2697'. [ 322.301077][T16201] netlink: 'syz.2.2712': attribute type 2 has an invalid length. [ 322.346364][T16202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2711'. [ 322.374248][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 322.399855][T16204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2713'. [ 322.429083][T16207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2714'. [ 322.442807][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.592369][T16218] 8021q: VLANs not supported on wg1 [ 322.605621][T16219] tipc: Enabled bearer , priority 0 [ 322.613732][T16219] syzkaller0: entered promiscuous mode [ 322.619208][T16219] syzkaller0: entered allmulticast mode [ 322.629599][T16219] tipc: Resetting bearer [ 322.635465][T16219] syzkaller0: tun_net_xmit 90 [ 322.660206][T16220] netlink: 'syz.2.2718': attribute type 4 has an invalid length. [ 322.773016][ C1] syzkaller0: tun_net_xmit 90 [ 322.850177][T16233] tipc: Enabled bearer , priority 0 [ 322.857668][T16233] syzkaller0: entered promiscuous mode [ 322.863652][T16233] syzkaller0: entered allmulticast mode [ 322.876561][T16233] tipc: Resetting bearer [ 322.883588][T16232] tipc: Resetting bearer [ 322.890685][T16232] tipc: Disabling bearer [ 322.912744][ C1] syzkaller0: tun_net_xmit 90 [ 323.052747][ C1] syzkaller0: tun_net_xmit 90 [ 323.193127][ C1] syzkaller0: tun_net_xmit 90 [ 323.332816][ C1] syzkaller0: tun_net_xmit 90 [ 323.369400][T16210] tipc: Resetting bearer [ 323.387144][T16210] tipc: Disabling bearer [ 323.446319][T16262] netlink: 'syz.0.2732': attribute type 21 has an invalid length. [ 323.454240][T16262] netlink: 'syz.0.2732': attribute type 5 has an invalid length. [ 323.461960][T16262] netlink: 'syz.0.2732': attribute type 6 has an invalid length. [ 323.483090][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.506566][T16261] wlan1 speed is unknown, defaulting to 1000 [ 323.523784][T16261] lo speed is unknown, defaulting to 1000 [ 323.634893][T16271] bond0: (slave syz_tun): Releasing backup interface [ 323.746195][T16279] netlink: 'syz.3.2735': attribute type 10 has an invalid length. [ 323.890556][T16284] wlan1 speed is unknown, defaulting to 1000 [ 324.017248][T16284] lo speed is unknown, defaulting to 1000 [ 324.182947][ T6415] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.260199][ T5182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.285855][T16309] tipc: Enabled bearer , priority 10 [ 324.305599][ T5182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.307234][T16311] lo speed is unknown, defaulting to 1000 [ 324.330297][ T5182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.338710][T16311] lo speed is unknown, defaulting to 1000 [ 324.360631][ T5182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.369533][ T5182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.415928][T16311] lo speed is unknown, defaulting to 1000 [ 324.421812][T16320] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 324.453838][T16311] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 324.485280][T16311] lo speed is unknown, defaulting to 1000 [ 324.520697][T16311] lo speed is unknown, defaulting to 1000 [ 324.526739][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.544471][T16311] lo speed is unknown, defaulting to 1000 [ 324.552351][T16311] lo speed is unknown, defaulting to 1000 [ 324.559379][T16311] lo speed is unknown, defaulting to 1000 [ 324.571065][T16306] wlan1 speed is unknown, defaulting to 1000 [ 324.596308][T16306] lo speed is unknown, defaulting to 1000 [ 324.602987][T16311] lo speed is unknown, defaulting to 1000 [ 324.618538][T16311] lo speed is unknown, defaulting to 1000 [ 324.733666][ T4047] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.912365][T16335] __nla_validate_parse: 6 callbacks suppressed [ 324.912381][T16335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2752'. [ 325.027864][T16306] chnl_net:caif_netlink_parms(): no params data found [ 325.099992][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'. [ 325.116006][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2757'. [ 325.135613][T16359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2758'. [ 325.220345][T16306] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.227856][T16306] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.237248][T16306] bridge_slave_0: entered allmulticast mode [ 325.244968][T16306] bridge_slave_0: entered promiscuous mode [ 325.254689][T16306] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.272787][T16306] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.280057][T16306] bridge_slave_1: entered allmulticast mode [ 325.287409][T16306] bridge_slave_1: entered promiscuous mode [ 325.332305][T16306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.343940][T16306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.367456][T16370] syzkaller0: entered promiscuous mode [ 325.374005][T16370] syzkaller0: entered allmulticast mode [ 325.412902][ T6415] tipc: Node number set to 2411069174 [ 325.423843][T16306] team0: Port device team_slave_0 added [ 325.438431][T16306] team0: Port device team_slave_1 added [ 325.509527][T16306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.517865][T16306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.561634][T16306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.572774][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 325.586572][T16306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.594176][T16306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.632172][T16306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.654941][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 325.655909][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 325.678582][T16380] wlan1 speed is unknown, defaulting to 1000 [ 325.710969][T16380] lo speed is unknown, defaulting to 1000 [ 325.845243][T16306] hsr_slave_0: entered promiscuous mode [ 325.915311][T16306] hsr_slave_1: entered promiscuous mode [ 325.925859][T16306] debugfs: 'hsr0' already exists in 'hsr' [ 325.940079][T16306] Cannot create hsr debugfs directory [ 325.965634][T16380] lo speed is unknown, defaulting to 1000 [ 326.216932][T16423] netlink: zone id is out of range [ 326.222829][T16423] netlink: zone id is out of range [ 326.229052][T16423] netlink: zone id is out of range [ 326.278270][T16413] wlan1 speed is unknown, defaulting to 1000 [ 326.429427][T16413] lo speed is unknown, defaulting to 1000 [ 326.443285][ T5865] Bluetooth: hci5: command tx timeout [ 326.489814][T16306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.558355][T16306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.602823][ C0] net_ratelimit: 301 callbacks suppressed [ 326.602841][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.653796][T16413] lo speed is unknown, defaulting to 1000 [ 326.691872][T16432] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2780'. [ 326.703523][T16306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.759810][T16306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.781640][T16438] validate_nla: 1 callbacks suppressed [ 326.781658][T16438] netlink: 'syz.2.2782': attribute type 10 has an invalid length. [ 326.929198][T16306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.983085][T16306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.001943][T16306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.069851][T16306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.115226][T16457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2787'. [ 327.153803][T16457] 8021q: adding VLAN 0 to HW filter on device bond9 [ 327.247529][T16306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.272249][T16306] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.307975][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.315140][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.337055][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.344201][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.397969][T16476] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 327.437063][T16306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.595805][T16306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.642959][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.660579][T16306] veth0_vlan: entered promiscuous mode [ 327.678543][T16306] veth1_vlan: entered promiscuous mode [ 327.707468][T16306] veth0_macvtap: entered promiscuous mode [ 327.717572][T16306] veth1_macvtap: entered promiscuous mode [ 327.734034][T16306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.747519][T16306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.760565][ T8985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.769917][ T8985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.783856][ T8985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.799740][ T8985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.853395][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.864003][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.900033][ T8985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.915223][ T8985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.096609][T16511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 328.171522][T16516] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2802'. [ 328.190266][T16516] syzkaller0: left promiscuous mode [ 328.196275][T16516] syzkaller0: left allmulticast mode [ 328.210722][T16513] wlan1 speed is unknown, defaulting to 1000 [ 328.220087][T16513] lo speed is unknown, defaulting to 1000 [ 328.456542][T16513] lo speed is unknown, defaulting to 1000 [ 328.522813][ T5865] Bluetooth: hci5: command tx timeout [ 328.570605][T16536] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 328.682806][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 328.782920][T16557] netlink: 'syz.3.2811': attribute type 6 has an invalid length. [ 328.820743][T16557] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 329.157850][T16574] netlink: 'syz.2.2818': attribute type 4 has an invalid length. [ 329.168631][T16572] tipc: Enabled bearer , priority 0 [ 329.181849][T16572] syzkaller0: entered promiscuous mode [ 329.187731][T16572] syzkaller0: entered allmulticast mode [ 329.212205][T16582] netlink: 'syz.2.2818': attribute type 4 has an invalid length. [ 329.267418][ T48] lo speed is unknown, defaulting to 1000 [ 329.294767][T16572] tipc: Resetting bearer [ 329.330444][ T4047] lo speed is unknown, defaulting to 1000 [ 329.345164][T16572] tipc: Resetting bearer [ 329.384720][T16572] tipc: Disabling bearer [ 329.409495][ T48] lo speed is unknown, defaulting to 1000 [ 329.479332][T16600] netlink: 'syz.0.2824': attribute type 15 has an invalid length. [ 329.509128][T16600] netlink: 'syz.0.2824': attribute type 2 has an invalid length. [ 329.556898][T16610] (unnamed net_device) (uninitialized): option lacp_active: invalid value (6) [ 329.634769][T16618] netlink: 'syz.1.2829': attribute type 8 has an invalid length. [ 329.722858][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 329.837750][T16637] pimreg: entered allmulticast mode [ 329.989349][T16655] __nla_validate_parse: 5 callbacks suppressed [ 329.989367][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2837'. [ 330.010929][ T8985] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.017988][T16655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2837'. [ 330.028479][ T8985] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.040469][ T8985] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.049531][ T8985] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.098504][T16662] tipc: Enabled bearer , priority 0 [ 330.106672][T16662] syzkaller0: entered promiscuous mode [ 330.112208][T16662] syzkaller0: entered allmulticast mode [ 330.130121][T16662] tipc: Resetting bearer [ 330.136666][T16662] openvswitch: netlink: Missing key (keys=40, expected=80) [ 330.177100][T16661] tipc: Resetting bearer [ 330.201782][T16661] tipc: Disabling bearer [ 330.280569][T16679] bridge6: entered promiscuous mode [ 330.438758][T16693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.581818][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 330.603341][ T5182] Bluetooth: hci5: command tx timeout [ 330.649193][T16712] bridge11: entered allmulticast mode [ 330.697709][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2855'. [ 330.717196][T16716] syzkaller0: entered promiscuous mode [ 330.742607][T16716] syzkaller0: entered allmulticast mode [ 330.759524][T16725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2859'. [ 330.769168][T16719] wlan1 speed is unknown, defaulting to 1000 [ 330.772826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 330.779453][T16719] lo speed is unknown, defaulting to 1000 [ 330.799780][T16725] netlink: 'syz.0.2859': attribute type 1 has an invalid length. [ 330.807710][T16727] netlink: 'syz.0.2859': attribute type 1 has an invalid length. [ 330.821316][T16725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2859'. [ 330.830455][T16727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2859'. [ 330.849986][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 330.934197][T16736] wlan1 speed is unknown, defaulting to 1000 [ 330.966295][T16719] lo speed is unknown, defaulting to 1000 [ 330.972558][T16736] lo speed is unknown, defaulting to 1000 [ 331.083068][T16747] can: request_module (can-proto-0) failed. [ 331.186085][T16751] sctp: [Deprecated]: syz.1.2866 (pid 16751) Use of int in maxseg socket option. [ 331.186085][T16751] Use struct sctp_assoc_value instead [ 331.203960][T16736] lo speed is unknown, defaulting to 1000 [ 331.280958][T16753] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 331.606252][T16769] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2872'. [ 331.707729][T16778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.800063][T16778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2873'. [ 331.812723][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.820861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.901171][T16785] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 332.174324][T16805] openvswitch: netlink: Duplicate or invalid key (type 0). [ 332.181570][T16805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.211747][ T979] IPVS: starting estimator thread 0... [ 332.239183][T16811] tipc: Failed to remove unknown binding: 66,1,1/1322284184:2493082161/2493082163 [ 332.273208][T16811] tipc: Failed to remove unknown binding: 66,1,1/1322284184:2493082161/2493082163 [ 332.282448][T16811] tipc: Failed to remove unknown binding: 66,1,1/1322284184:2493082161/2493082163 [ 332.315336][T16809] IPVS: using max 49 ests per chain, 117600 per kthread [ 332.341118][T16815] bridge12: entered promiscuous mode [ 332.348732][T16815] macsec0: entered promiscuous mode [ 332.363547][T16815] macsec0: entered allmulticast mode [ 332.369057][T16815] bridge12: entered allmulticast mode [ 332.376037][T16815] bridge12: port 1(macsec0) entered blocking state [ 332.382951][T16815] bridge12: port 1(macsec0) entered disabled state [ 332.391637][T16815] bridge12: left allmulticast mode [ 332.397212][T16815] bridge12: left promiscuous mode [ 332.457386][T16823] erspan0: left allmulticast mode [ 332.468557][T16823] erspan0: left promiscuous mode [ 332.474051][T16823] bridge0: port 1(erspan0) entered disabled state [ 332.488203][T16822] bridge0: port 1(erspan0) entered blocking state [ 332.502775][T16822] bridge0: port 1(erspan0) entered disabled state [ 332.517441][T16822] erspan0: entered allmulticast mode [ 332.523809][T16822] erspan0: entered promiscuous mode [ 332.619441][T16829] wlan1 speed is unknown, defaulting to 1000 [ 332.641197][T16829] lo speed is unknown, defaulting to 1000 [ 332.683204][ T5182] Bluetooth: hci5: command 0x0419 tx timeout [ 332.842789][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 332.844093][T16829] lo speed is unknown, defaulting to 1000 [ 333.718286][T16886] 8021q: VLANs not supported on ipvlan1 [ 333.774011][T16889] validate_nla: 1 callbacks suppressed [ 333.774029][T16889] netlink: 'syz.2.2908': attribute type 4 has an invalid length. [ 333.801397][ T979] lo speed is unknown, defaulting to 1000 [ 333.807543][ T979] s9z0: Port: 1 Link DOWN [ 333.812992][ T979] lo speed is unknown, defaulting to 1000 [ 333.826986][T16889] syzkaller1: entered promiscuous mode [ 333.832463][T16889] syzkaller1: entered allmulticast mode [ 333.841984][T16889] netlink: 'syz.2.2908': attribute type 4 has an invalid length. [ 333.870428][ T7951] lo speed is unknown, defaulting to 1000 [ 333.876981][ T7951] s9z0: Port: 1 Link ACTIVE [ 333.882739][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.894679][ T7951] lo speed is unknown, defaulting to 1000 [ 333.902490][ T7951] lo speed is unknown, defaulting to 1000 [ 333.910793][ T7951] s9z0: Port: 1 Link DOWN [ 334.013326][T16899] wlan1 speed is unknown, defaulting to 1000 [ 334.031393][T16899] lo speed is unknown, defaulting to 1000 [ 334.209408][T16899] lo speed is unknown, defaulting to 1000 [ 334.548271][T16925] netlink: 'syz.3.2917': attribute type 9 has an invalid length. [ 334.766417][ T5865] Bluetooth: hci5: command 0x0419 tx timeout [ 334.807443][ T30] audit: type=1800 audit(1756192921.501:5): pid=16938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2922" name="cgroup.controllers" dev="tmpfs" ino=2796 res=0 errno=0 [ 334.922989][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.940981][T16965] netlink: 'syz.4.2931': attribute type 7 has an invalid length. [ 334.950949][T16965] netlink: 'syz.4.2931': attribute type 8 has an invalid length. [ 334.976418][T16959] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 334.986990][T16959] netlink: 'syz.2.2930': attribute type 4 has an invalid length. [ 335.050465][T16967] ip6gretap0: left allmulticast mode [ 335.103306][T16967] ip6gretap0: left promiscuous mode [ 335.138955][T16967] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 335.238324][T16975] tipc: Enabling of bearer rejected, failed to enable media [ 335.301477][ T6089] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.319351][ T6089] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.344645][ T6089] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.377693][ T6089] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.400182][ T6089] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.414963][ T6089] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.447812][ T6089] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.458025][ T6089] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.655912][T17034] netlink: 'syz.1.2946': attribute type 13 has an invalid length. [ 335.666079][T17034] netlink: 'syz.1.2946': attribute type 17 has an invalid length. [ 335.718717][T17034] erspan0: left promiscuous mode [ 335.765171][T17034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.792429][ T6415] lo speed is unknown, defaulting to 1000 [ 335.798364][ T6415] syz2: Port: 1 Link ACTIVE [ 335.819489][T17035] wlan1 speed is unknown, defaulting to 1000 [ 335.826779][T17035] lo speed is unknown, defaulting to 1000 [ 335.839548][T17029] __nla_validate_parse: 16 callbacks suppressed [ 335.839563][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'. [ 335.926810][T17060] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.951499][T17062] tc_dump_action: action bad kind [ 336.013375][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 336.022448][T17035] lo speed is unknown, defaulting to 1000 [ 336.040342][T17064] wlan1 speed is unknown, defaulting to 1000 [ 336.060651][T17064] lo speed is unknown, defaulting to 1000 [ 336.162346][T17073] ipvlan0: entered promiscuous mode [ 336.168545][T17073] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 336.188558][T17064] lo speed is unknown, defaulting to 1000 [ 336.358672][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 336.745690][T17114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2962'. [ 337.002782][ C0] net_ratelimit: 3 callbacks suppressed [ 337.002800][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.527223][T17153] syzkaller1: entered promiscuous mode [ 337.546132][T17153] syzkaller1: entered allmulticast mode [ 337.561250][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.569889][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.578247][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.595579][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.608434][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.658012][T17157] wlan1 speed is unknown, defaulting to 1000 [ 337.667058][T17157] lo speed is unknown, defaulting to 1000 [ 337.757811][T17157] lo speed is unknown, defaulting to 1000 [ 337.765984][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 337.809865][T17167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2977'. [ 337.827380][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 337.828833][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 337.877098][T17176] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2979'. [ 337.975305][T17157] chnl_net:caif_netlink_parms(): no params data found [ 338.042803][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.140302][T17187] tipc: Enabled bearer , priority 0 [ 338.205269][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.212425][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.226298][T17157] bridge_slave_0: entered allmulticast mode [ 338.235161][T17157] bridge_slave_0: entered promiscuous mode [ 338.244597][T17157] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.256464][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.264514][T17157] bridge_slave_1: entered allmulticast mode [ 338.284099][T17157] bridge_slave_1: entered promiscuous mode [ 338.411459][T17157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.421792][T17185] tipc: Resetting bearer [ 338.464883][T17185] tipc: Disabling bearer [ 338.476418][T17157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.487927][T17227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2988'. [ 338.564432][T17157] team0: Port device team_slave_0 added [ 338.571940][T17157] team0: Port device team_slave_1 added [ 338.662133][T17232] wlan1 speed is unknown, defaulting to 1000 [ 338.670307][T17247] netlink: 'syz.0.2993': attribute type 13 has an invalid length. [ 338.683232][T17247] netlink: 'syz.0.2993': attribute type 17 has an invalid length. [ 338.691907][T17232] lo speed is unknown, defaulting to 1000 [ 338.692483][T17157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.717103][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.776219][T17157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.905763][T17247] ip6gretap0: entered promiscuous mode [ 338.928368][T17247] bridge0: port 1(erspan0) entered blocking state [ 338.934956][T17247] bridge0: port 1(erspan0) entered listening state [ 338.947220][T17247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.968942][T17247] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.980626][T17247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.997105][T17157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.004383][T17157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.030488][T17157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.042091][T17232] lo speed is unknown, defaulting to 1000 [ 339.072431][T17251] wlan1 speed is unknown, defaulting to 1000 [ 339.082807][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 339.113159][T17251] lo speed is unknown, defaulting to 1000 [ 339.126392][T17157] hsr_slave_0: entered promiscuous mode [ 339.133097][T17157] hsr_slave_1: entered promiscuous mode [ 339.139293][T17157] debugfs: 'hsr0' already exists in 'hsr' [ 339.145256][T17157] Cannot create hsr debugfs directory [ 339.287231][T17251] lo speed is unknown, defaulting to 1000 [ 339.643013][ T5865] Bluetooth: hci0: command tx timeout [ 339.667541][T17157] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.676104][T17157] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.688918][T17157] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.701565][T17157] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.770820][T17157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.798256][T17157] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.814830][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.821962][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.842134][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.849304][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.905700][T17291] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 340.038574][T17298] netlink: 'syz.1.3007': attribute type 14 has an invalid length. [ 340.051104][T17298] netlink: 'syz.1.3007': attribute type 13 has an invalid length. [ 340.057781][T17301] tipc: Enabled bearer , priority 0 [ 340.084310][T17301] syzkaller0: entered promiscuous mode [ 340.090168][T17301] syzkaller0: entered allmulticast mode [ 340.123601][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.155974][T17157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.158444][T17306] netlink: 'syz.4.3010': attribute type 96 has an invalid length. [ 340.175597][T17303] netlink: 'syz.1.3009': attribute type 5 has an invalid length. [ 340.184042][T17300] tipc: Resetting bearer [ 340.212727][T17303] netlink: 'syz.1.3009': attribute type 7 has an invalid length. [ 340.221418][T17300] tipc: Disabling bearer [ 340.242542][T17303] : entered promiscuous mode [ 340.308352][T17157] veth0_vlan: entered promiscuous mode [ 340.317137][T17309] "syz.4.3010" (17309) uses obsolete ecb(arc4) skcipher [ 340.320637][T17157] veth1_vlan: entered promiscuous mode [ 340.377219][T17157] veth0_macvtap: entered promiscuous mode [ 340.461354][T17157] veth1_macvtap: entered promiscuous mode [ 340.520633][T17157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.547526][T17315] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 340.556875][T17157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.574536][T17315] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 340.582835][T17315] tipc: Enabled bearer , priority 10 [ 340.598143][ T8981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.634606][ T8981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.660793][ T8981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.685057][ T8981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.748446][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.758682][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.791423][ T8984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.802170][ T8984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.162838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.326563][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.335641][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.345710][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.358723][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.366132][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.394743][T17353] wlan1 speed is unknown, defaulting to 1000 [ 341.401630][T17353] lo speed is unknown, defaulting to 1000 [ 341.497103][T17353] lo speed is unknown, defaulting to 1000 [ 341.599379][T17353] chnl_net:caif_netlink_parms(): no params data found [ 341.640023][T17353] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.647454][T17353] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.656319][T17353] bridge_slave_0: entered allmulticast mode [ 341.663559][T17353] bridge_slave_0: entered promiscuous mode [ 341.671327][T17353] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.678729][T17353] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.685906][T17353] bridge_slave_1: entered allmulticast mode [ 341.692344][T17353] bridge_slave_1: entered promiscuous mode [ 341.709954][T17353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.720625][T17353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.722846][ T5865] Bluetooth: hci0: command 0x041b tx timeout [ 341.747745][T17353] team0: Port device team_slave_0 added [ 341.755537][T17353] team0: Port device team_slave_1 added [ 341.771848][T17353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.778823][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.805124][T17353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.817542][T17353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.824554][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.850834][T17353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.883739][T17353] hsr_slave_0: entered promiscuous mode [ 341.889854][T17353] hsr_slave_1: entered promiscuous mode [ 341.896059][T17353] debugfs: 'hsr0' already exists in 'hsr' [ 341.901769][T17353] Cannot create hsr debugfs directory [ 342.131198][T17353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.141810][T17353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.156115][T17353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.167200][T17353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.202795][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.214601][T17353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.230580][T17353] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.240956][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.248058][ T8984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.260719][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.267807][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.389532][T17353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.418262][T17353] veth0_vlan: entered promiscuous mode [ 342.428065][T17353] veth1_vlan: entered promiscuous mode [ 342.448301][T17353] veth0_macvtap: entered promiscuous mode [ 342.457408][T17353] veth1_macvtap: entered promiscuous mode [ 342.469595][T17353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.481308][T17353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.494885][ T8984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.503973][ T8984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.517548][ T8984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.526918][ T8984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.564945][ T8985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.576696][ T8985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.591581][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.600262][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.671403][T17385] netlink: 'syz.0.3018': attribute type 21 has an invalid length. [ 343.242879][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.403133][ T5182] Bluetooth: hci1: command tx timeout [ 343.802754][ T5182] Bluetooth: hci0: command 0x041b tx timeout [ 344.282735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.322779][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.483265][ T5182] Bluetooth: hci1: command tx timeout [ 345.882831][ T5182] Bluetooth: hci0: command 0x041b tx timeout [ 346.362765][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.402791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.573351][ T5182] Bluetooth: hci1: command tx timeout [ 347.803067][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.962985][ T5182] Bluetooth: hci0: command 0x041b tx timeout [ 348.443162][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.482810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.652986][ T5182] Bluetooth: hci1: command tx timeout [ 350.522753][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.562783][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.602779][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.642766][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.682739][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.722765][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.042804][ T24] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 60 sec [ 356.764196][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.812836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.842756][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.882799][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.922769][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.962893][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.002761][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.042772][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.082937][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.122776][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.162745][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.202765][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.242864][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.563082][ C1] bridge0: port 1(erspan0) entered learning state [ 370.282801][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.322743][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.362781][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.403587][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.442753][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.482746][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.522748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.562748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.524008][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.603023][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.642762][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.802928][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.682775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.722811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.772779][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.802764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.842796][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.892735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.922738][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.473471][T17397] tipc: Started in network mode [ 387.478377][T17397] tipc: Node identity 124cb11ff54, cluster identity 4711 [ 387.517672][T17397] tipc: Enabled bearer , priority 0 [ 387.546322][T17397] syzkaller0: entered promiscuous mode [ 387.561981][T17397] syzkaller0: entered allmulticast mode [ 387.727956][T17397] tipc: Resetting bearer [ 387.752321][T17410] __nla_validate_parse: 5 callbacks suppressed [ 387.752337][T17410] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3032'. [ 387.812264][T17392] tipc: Resetting bearer [ 387.826932][T17392] tipc: Disabling bearer [ 387.862853][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.871930][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.881266][ T5182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.891529][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.899404][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.956268][T17419] wlan1 speed is unknown, defaulting to 1000 [ 387.962735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.988731][T17419] lo speed is unknown, defaulting to 1000 [ 388.028152][T17424] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3036'. [ 388.231591][T17419] lo speed is unknown, defaulting to 1000 [ 388.295383][T17440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3039'. [ 388.305135][T17440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3039'. [ 388.325066][T17417] netlink: 'syz.0.3035': attribute type 12 has an invalid length. [ 388.333164][T17417] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3035'. [ 388.349942][T17440] bridge0: entered promiscuous mode [ 388.356679][T17440] ip6gretap0: entered promiscuous mode [ 388.363860][T17440] debugfs: 'hsr1' already exists in 'hsr' [ 388.369760][T17440] Cannot create hsr debugfs directory [ 388.375353][T17440] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 388.393311][T17445] wlan1 speed is unknown, defaulting to 1000 [ 388.449413][T17445] lo speed is unknown, defaulting to 1000 [ 388.458545][T17456] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3042'. [ 388.493918][T17457] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3042'. [ 388.575245][T17419] chnl_net:caif_netlink_parms(): no params data found [ 388.591417][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3043'. [ 388.619682][T17461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3043'. [ 388.638272][ T8985] tipc: Resetting bearer [ 388.713253][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 389.002767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.504721][ T8985] dvmrp0 (unregistering): left allmulticast mode [ 389.775515][ T8985] tipc: Disabling bearer [ 389.962804][ T5865] Bluetooth: hci2: command tx timeout [ 389.985236][ T8985] bond1 (unregistering): Released all slaves [ 389.999108][ T8985] bond2 (unregistering): Released all slaves [ 390.012059][ T8985] bond3 (unregistering): Released all slaves [ 390.027170][ T8985] bond4 (unregistering): Released all slaves [ 390.037924][ T8985] bond0 (unregistering): Released all slaves [ 390.044292][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.065792][ T8985] bond5 (unregistering): Released all slaves [ 390.081137][ T8985] bond6 (unregistering): Released all slaves [ 390.091882][ T8985] bond7 (unregistering): Released all slaves [ 390.117630][T17445] lo speed is unknown, defaulting to 1000 [ 390.130840][ T8981] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 390.228529][ T8985] : left promiscuous mode [ 390.251298][T17487] wlan1 speed is unknown, defaulting to 1000 [ 390.251823][T17419] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.266771][T17419] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.275976][T17419] bridge_slave_0: entered allmulticast mode [ 390.283501][T17419] bridge_slave_0: entered promiscuous mode [ 390.290978][T17487] lo speed is unknown, defaulting to 1000 [ 390.291448][T17419] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.309812][T17419] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.317259][T17419] bridge_slave_1: entered allmulticast mode [ 390.325275][T17419] bridge_slave_1: entered promiscuous mode [ 390.334827][ T8985] tipc: Disabling bearer [ 390.343181][ T8985] tipc: Left network mode [ 390.380470][ T8985] IPVS: stopping backup sync thread 15819 ... [ 390.434591][T17504] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3053'. [ 390.473827][T17419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.486899][T17419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.498684][T17487] lo speed is unknown, defaulting to 1000 [ 390.587178][T17419] team0: Port device team_slave_0 added [ 390.629528][T17419] team0: Port device team_slave_1 added [ 390.712204][T17419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.720790][T17419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.747256][T17419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.769096][T17419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.777265][T17419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.807456][T17419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.849675][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 390.950055][T17419] hsr_slave_0: entered promiscuous mode [ 390.961698][T17419] hsr_slave_1: entered promiscuous mode [ 390.968008][T17419] debugfs: 'hsr0' already exists in 'hsr' [ 390.973917][T17419] Cannot create hsr debugfs directory [ 391.082741][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.208047][ T8975] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.221665][ T8975] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.236721][ T8985] hsr_slave_0: left promiscuous mode [ 391.245075][ T8985] hsr_slave_1: left promiscuous mode [ 391.298335][ T48] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.366461][ T979] lo speed is unknown, defaulting to 1000 [ 391.372221][ T979] infiniband syz2: ib_query_port failed (-19) [ 391.410878][T17535] wlan1 speed is unknown, defaulting to 1000 [ 391.431595][T17535] lo speed is unknown, defaulting to 1000 [ 391.741141][T17552] netlink: 'syz.4.3064': attribute type 16 has an invalid length. [ 391.780953][ T7951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.862897][T17419] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.875176][T17419] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 391.897135][T17419] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 391.910033][T17419] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.937900][T17560] tipc: Enabled bearer , priority 0 [ 391.948991][T17560] syzkaller0: entered promiscuous mode [ 391.955011][T17560] syzkaller0: entered allmulticast mode [ 391.979865][T17563] tipc: Resetting bearer [ 391.988204][T17563] tipc: Disabling bearer [ 392.054518][ T5865] Bluetooth: hci2: command tx timeout [ 392.062264][T17419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.097559][T17419] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.110896][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.118055][ T8975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.125605][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.141428][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.148509][ T8975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.424441][T17419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.441069][T17591] macvlan2: entered allmulticast mode [ 392.449317][T17591] veth1_vlan: entered allmulticast mode [ 392.459963][T17591] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 392.557169][T17419] veth0_vlan: entered promiscuous mode [ 392.577242][T17419] veth1_vlan: entered promiscuous mode [ 392.622110][T17419] veth0_macvtap: entered promiscuous mode [ 392.636965][T17419] veth1_macvtap: entered promiscuous mode [ 392.665688][T17419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.684159][T17419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.708637][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.721710][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.736618][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.766100][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.800340][T17599] __nla_validate_parse: 9 callbacks suppressed [ 392.800358][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3075'. [ 392.817222][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.829105][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.865528][ T8981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.874000][ T8981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.010520][T17608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 393.037178][T17608] netlink: 'syz.1.3077': attribute type 3 has an invalid length. [ 393.054997][T17608] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 393.076762][T17608] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3077'. [ 393.100193][T17618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.116995][T17608] NCSI netlink: No device for ifindex 0 [ 393.162770][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.171910][T17622] tap0: tun_chr_ioctl cmd 1074025676 [ 393.191538][T17622] tap0: owner set to 0 [ 393.352749][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3083'. [ 393.436141][T17646] netlink: 'syz.4.3089': attribute type 1 has an invalid length. [ 393.492385][T17646] veth7: entered promiscuous mode [ 393.500528][T17646] bond10: (slave veth7): Enslaving as a backup interface with a down link [ 393.511642][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3089'. [ 393.528365][T17646] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.652895][T17666] tipc: Enabled bearer , priority 0 [ 393.670530][T17666] syzkaller0: entered promiscuous mode [ 393.679784][T17666] syzkaller0: entered allmulticast mode [ 393.819081][T17665] wlan1 speed is unknown, defaulting to 1000 [ 393.827752][T17665] lo speed is unknown, defaulting to 1000 [ 394.123696][ T5865] Bluetooth: hci2: command tx timeout [ 394.138452][ T979] IPVS: starting estimator thread 0... [ 394.202850][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.232868][T17698] IPVS: using max 42 ests per chain, 100800 per kthread [ 394.249297][T17700] netlink: 'syz.1.3102': attribute type 11 has an invalid length. [ 394.257774][T17700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3102'. [ 394.471821][T17664] tipc: Resetting bearer [ 394.480631][T17664] tipc: Disabling bearer [ 394.571597][T17704] netlink: 'syz.4.3103': attribute type 2 has an invalid length. [ 394.579872][T17704] netlink: 'syz.4.3103': attribute type 2 has an invalid length. [ 394.609675][T17704] syzkaller0: entered promiscuous mode [ 394.615419][T17704] syzkaller0: entered allmulticast mode [ 394.628818][T17705] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 394.641004][T17705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.651426][T17705] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 394.910618][T17718] veth0_to_bridge: entered promiscuous mode [ 394.934133][T17715] veth0_to_bridge: left promiscuous mode [ 394.967692][T17720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.177144][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3110'. [ 395.242777][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.454586][T17737] netlink: 'syz.2.3112': attribute type 8 has an invalid length. [ 395.475640][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'. [ 395.492582][T17737] bond0: entered promiscuous mode [ 395.499266][T17737] bond_slave_0: entered promiscuous mode [ 395.508057][T17737] bond_slave_1: entered promiscuous mode [ 395.515252][T17737] batadv0: entered promiscuous mode [ 395.526575][T17737] bond0: left promiscuous mode [ 395.531527][T17737] bond_slave_0: left promiscuous mode [ 395.538632][T17737] bond_slave_1: left promiscuous mode [ 395.544572][T17737] batadv0: left promiscuous mode [ 395.652880][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.116403][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3119'. [ 396.204686][ T5865] Bluetooth: hci2: command tx timeout [ 396.252913][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.262752][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.269980][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.279880][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.286970][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.296591][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.341976][T17764] wlan1 speed is unknown, defaulting to 1000 [ 396.350668][T17764] lo speed is unknown, defaulting to 1000 [ 396.390572][T17769] batadv_slave_1: entered promiscuous mode [ 396.418647][T17768] batadv_slave_1: left promiscuous mode [ 396.651185][T17764] chnl_net:caif_netlink_parms(): no params data found [ 396.687104][T17788] mac80211_hwsim hwsim66 wlan0: entered promiscuous mode [ 396.697928][T17788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3126'. [ 396.707036][T17788] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 396.778716][T17764] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.800571][T17764] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.813008][T17764] bridge_slave_0: entered allmulticast mode [ 396.823514][T17764] bridge_slave_0: entered promiscuous mode [ 396.831484][T17764] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.839877][T17764] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.847698][T17764] bridge_slave_1: entered allmulticast mode [ 396.855198][T17764] bridge_slave_1: entered promiscuous mode [ 396.917626][T17764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.964752][T17764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.091991][T17764] team0: Port device team_slave_0 added [ 397.156978][T17764] team0: Port device team_slave_1 added [ 397.261169][T17764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.281270][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.322735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.344183][T17764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.388521][T17764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.422739][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.488849][T17764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.693462][T17764] hsr_slave_0: entered promiscuous mode [ 397.726756][T17764] hsr_slave_1: entered promiscuous mode [ 397.750214][T17764] debugfs: 'hsr0' already exists in 'hsr' [ 397.773042][T17764] Cannot create hsr debugfs directory [ 397.836490][ T6089] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.944678][ T6089] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.072005][ T6089] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.146080][T17836] __nla_validate_parse: 3 callbacks suppressed [ 398.146099][T17836] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3138'. [ 398.173152][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3141'. [ 398.199982][T17837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3141'. [ 398.216854][T17834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3140'. [ 398.227566][T17836] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3138'. [ 398.239611][T17837] netlink: 'syz.2.3141': attribute type 20 has an invalid length. [ 398.249220][T17836] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3138'. [ 398.277353][T17836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3138'. [ 398.364958][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.372956][ T5182] Bluetooth: hci3: command tx timeout [ 398.542452][ T6089] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.630764][ T8975] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.672747][ T8975] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.761778][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 398.845419][ T8975] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.859976][T17845] erspan0: entered promiscuous mode [ 398.868766][T17845] erspan0: left promiscuous mode [ 398.916725][T17848] bridge_slave_1: left allmulticast mode [ 398.925730][T17848] bridge_slave_1: left promiscuous mode [ 398.946187][T17848] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.988594][T17848] bridge_slave_0: left allmulticast mode [ 399.002496][T17848] bridge_slave_0: left promiscuous mode [ 399.014101][T17848] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.146442][ T8975] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.402745][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.448409][T17867] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3148'. [ 399.606422][ T6089] macsec0: left allmulticast mode [ 399.612340][ T6089] macsec0: left promiscuous mode [ 399.626760][ T6089] bridge0: port 1(macsec0) entered disabled state [ 399.642805][ C1] bridge0: port 1(erspan0) entered forwarding state [ 399.649443][ C1] bridge0: topology change detected, propagating [ 399.863558][ T6089] ip6gretap0 (unregistering): left promiscuous mode [ 399.883475][ T6089] bond3 (unregistering): (slave ip6gretap2): Releasing active interface [ 399.892019][ T6089] bond3 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 26:7d:99:e0:27:c5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 399.918533][ T6089] bond3 (unregistering): (slave erspan0): making interface the new active one [ 399.989628][ T6089] bond3 (unregistering): (slave erspan0): Releasing active interface [ 400.087966][ T6089] bridge0 (unregistering): left promiscuous mode [ 400.442733][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.450802][ T5182] Bluetooth: hci3: command tx timeout [ 400.507658][ T6089] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 400.525401][ T6089] bond0 (unregistering): (slave bond7): Releasing backup interface [ 400.542577][ T6089] bond0 (unregistering): Released all slaves [ 400.600207][ T6089] bond1 (unregistering): Released all slaves [ 400.616999][ T6089] bond2 (unregistering): Released all slaves [ 400.667145][ T6089] bond3 (unregistering): Released all slaves [ 400.722483][ T6089] bond4 (unregistering): (slave bond5): Releasing backup interface [ 400.732375][ T6089] bond4 (unregistering): Released all slaves [ 400.791338][ T6089] bond5 (unregistering): Released all slaves [ 400.848977][ T6089] bond6 (unregistering): Released all slaves [ 400.906887][ T6089] bond7 (unregistering): Released all slaves [ 400.923932][ T6089] bond8 (unregistering): Released all slaves [ 400.980940][ T6089] bond9 (unregistering): Released all slaves [ 401.039050][ T6089] bond10 (unregistering): (slave veth7): Releasing backup interface [ 401.051814][ T6089] bond10 (unregistering): Released all slaves [ 401.320380][ T6089] tipc: Disabling bearer [ 401.347996][ T6089] tipc: Left network mode [ 401.419946][T17891] syzkaller0: create flow: hash 2015485131 index 1 [ 401.443895][T17887] vxcan3: entered allmulticast mode [ 401.460278][ T6089] IPVS: stopping backup sync thread 8590 ... [ 401.482798][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.517827][T17890] dvmrp0: entered allmulticast mode [ 401.541565][T17885] syzkaller0: delete flow: hash 2015485131 index 1 [ 402.522782][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.530109][ T5182] Bluetooth: hci3: command tx timeout [ 402.757491][T17899] wlan1 speed is unknown, defaulting to 1000 [ 402.784083][T17899] lo speed is unknown, defaulting to 1000 [ 402.790447][T17764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.848523][T17764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.924673][T17764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.954364][T17764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 403.564986][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.603154][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.614792][ T5182] Bluetooth: hci3: command tx timeout [ 405.644923][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.612623][ C0] sched: DL replenish lagged too much [ 406.687288][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.724286][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.766996][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.805447][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.842985][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.886916][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.923106][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.964791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.005922][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.043292][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.083094][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.125349][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.166982][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.216101][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.246809][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.286649][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.323946][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.364217][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.404397][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.443739][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.483018][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.525144][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.564287][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.602756][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.645056][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.685588][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.735927][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.765813][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.806559][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.844247][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.884921][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.922722][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.966727][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.006219][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.894505][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 442.045530][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.085549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.126616][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.165002][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.204832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.243772][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.283683][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 449.334001][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.363842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 451.405189][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.444493][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 453.305400][ T5865] Bluetooth: hci5: command 0x0419 tx timeout [ 453.486027][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.523830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.565315][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.605163][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.645516][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.683041][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.723640][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.766601][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.804410][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.845259][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 463.884885][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.314088][ T5875] Bluetooth: hci0: command 0x041b tx timeout [ 464.922741][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.963645][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 467.004243][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 467.953035][ T5182] Bluetooth: hci1: command 0x0406 tx timeout [ 468.044270][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 469.085963][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.125234][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.163818][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.205971][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.244560][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.284984][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 475.322795][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.366457][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.406227][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.444092][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 479.486622][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.522954][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.562831][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 482.604042][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.645367][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.686566][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 485.722701][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 486.764311][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 487.805859][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.844961][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 489.882982][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.925592][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.966188][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.004400][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 494.046529][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.085499][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 496.123497][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.164611][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.203965][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.242939][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.285853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.326676][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.622830][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 502.364357][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 503.404548][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.444276][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.485396][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.527320][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 507.562719][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.605434][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.646164][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.682727][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 511.722799][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.766288][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 513.806228][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 514.534658][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 514.843633][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 515.883335][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.934204][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 517.963710][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.002846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.713501][ T5182] Bluetooth: hci3: command 0x0406 tx timeout [ 520.044427][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 521.086531][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 522.122786][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 523.172740][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 524.203651][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 525.244273][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 526.284026][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 527.326410][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 528.362735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 529.406076][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.446114][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 531.484765][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 532.524872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 533.562700][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 534.604766][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 535.655800][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 536.685144][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 537.724626][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 538.762990][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 539.804174][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 540.844086][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 541.883818][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 542.926097][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 543.963706][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 545.006549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 546.052694][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 547.083656][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 548.123969][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 549.163368][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 550.203195][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 551.246549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 552.284332][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 553.323697][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 554.365544][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 555.403588][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 556.446420][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 557.483256][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 558.526124][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 559.564795][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 560.606055][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 561.643317][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 562.685964][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 563.726695][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 564.763656][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 565.045292][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 565.805275][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 566.843620][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 567.884233][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 568.923014][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 569.966100][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 571.005739][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 572.043701][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 573.083402][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 574.124635][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 575.163725][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 576.204233][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 577.246589][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 578.286082][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 579.325718][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 580.362901][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 581.404138][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 582.446374][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 583.482703][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 584.525705][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 584.527686][ T31] INFO: task syz-executor:17764 blocked for more than 145 seconds. [ 585.563305][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 586.382708][ T31] Not tainted syzkaller #0 [ 586.387678][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.572925][ T31] task:syz-executor state:D stack:22760 pid:17764 tgid:17764 ppid:17749 task_flags:0x400140 flags:0x00004002 [ 586.602698][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 586.692663][ T31] Call Trace: [ 586.695969][ T31] [ 586.699288][ T31] __schedule+0x1798/0x4cc0 [ 586.752767][ T31] ? __pfx_bpf_trace_run2+0x10/0x10 [ 586.757999][ T31] ? __pfx___schedule+0x10/0x10 [ 586.842750][ T31] ? schedule+0x91/0x360 [ 586.847031][ T31] ? rcu_is_watching+0x15/0xb0 [ 586.851796][ T31] ? lock_release+0x4b/0x3e0 [ 586.922661][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 586.928603][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 587.032741][ T31] schedule+0x165/0x360 [ 587.036944][ T31] schedule_preempt_disabled+0x13/0x30 [ 587.082847][ T31] __mutex_lock+0x7e6/0x1350 [ 587.087475][ T31] ? __mutex_lock+0x5bb/0x1350 [ 587.092251][ T31] ? inet6_rtm_newaddr+0x5b7/0xd20 [ 587.152842][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 587.157901][ T31] ? nla_memcmp+0x62/0x90 [ 587.162249][ T31] inet6_rtm_newaddr+0x5b7/0xd20 [ 587.232743][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 587.237983][ T31] ? kernel_text_address+0xa5/0xe0 [ 587.283219][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 587.288709][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 587.342784][ T31] ? lock_release+0x4b/0x3e0 [ 587.347406][ T31] ? bpf_lsm_capable+0x9/0x20 [ 587.352082][ T31] ? security_capable+0x7e/0x2e0 [ 587.396163][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 587.401662][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 587.442755][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 587.447897][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 587.482800][ T31] ? __netlink_lookup+0xbd/0x810 [ 587.487761][ T31] ? rcu_is_watching+0x15/0xb0 [ 587.492527][ T31] ? rcu_is_watching+0x15/0xb0 [ 587.552693][ T31] netlink_rcv_skb+0x205/0x470 [ 587.557485][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 587.592818][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 587.598136][ T31] netlink_unicast+0x82c/0x9e0 [ 587.632714][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 587.638029][ T31] ? netlink_sendmsg+0x642/0xb30 [ 587.652713][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 587.682724][ T31] ? skb_put+0x11b/0x210 [ 587.686994][ T31] netlink_sendmsg+0x805/0xb30 [ 587.691757][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.732702][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 587.737832][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 587.792713][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.798034][ T31] __sock_sendmsg+0x21c/0x270 [ 587.842653][ T31] __sys_sendto+0x3bd/0x520 [ 587.847186][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 587.892732][ T31] ? fput_close_sync+0x119/0x200 [ 587.897707][ T31] ? rcu_is_watching+0x15/0xb0 [ 587.902476][ T31] __x64_sys_sendto+0xde/0x100 [ 587.952740][ T31] do_syscall_64+0xfa/0x3b0 [ 587.957281][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.002650][ T31] ? clear_bhb_loop+0x60/0xb0 [ 588.007355][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.062704][ T31] RIP: 0033:0x7f5fce190a7c [ 588.067145][ T31] RSP: 002b:00007fffdb6cd950 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 588.132732][ T31] RAX: ffffffffffffffda RBX: 00007f5fceee4620 RCX: 00007f5fce190a7c [ 588.140743][ T31] RDX: 0000000000000040 RSI: 00007f5fceee4670 RDI: 0000000000000003 [ 588.172741][ T31] RBP: 0000000000000000 R08: 00007fffdb6cd9a4 R09: 000000000000000c [ 588.180736][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 588.252791][ T31] R13: 0000000000000000 R14: 00007f5fceee4670 R15: 0000000000000000 [ 588.260797][ T31] [ 588.302777][ T31] INFO: lockdep is turned off. [ 588.307563][ T31] NMI backtrace for cpu 1 [ 588.307585][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 588.307601][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.307609][ T31] Call Trace: [ 588.307615][ T31] [ 588.307620][ T31] dump_stack_lvl+0x189/0x250 [ 588.307641][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.307656][ T31] ? __pfx__printk+0x10/0x10 [ 588.307678][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 588.307695][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 588.307712][ T31] ? __pfx__printk+0x10/0x10 [ 588.307730][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 588.307751][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 588.307768][ T31] watchdog+0xf93/0xfe0 [ 588.307787][ T31] ? watchdog+0x1de/0xfe0 [ 588.307806][ T31] kthread+0x70e/0x8a0 [ 588.307822][ T31] ? __pfx_watchdog+0x10/0x10 [ 588.307839][ T31] ? __pfx_kthread+0x10/0x10 [ 588.307854][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.307871][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.307889][ T31] ? __pfx_kthread+0x10/0x10 [ 588.307904][ T31] ret_from_fork+0x3f9/0x770 [ 588.307918][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 588.307932][ T31] ? __switch_to_asm+0x39/0x70 [ 588.307948][ T31] ? __switch_to_asm+0x33/0x70 [ 588.307964][ T31] ? __pfx_kthread+0x10/0x10 [ 588.307979][ T31] ret_from_fork_asm+0x1a/0x30 [ 588.308000][ T31] [ 588.308008][ T31] Sending NMI from CPU 1 to CPUs 0: [ 588.455241][ C0] NMI backtrace for cpu 0 [ 588.455258][ C0] CPU: 0 UID: 0 PID: 1154 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 588.455276][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.455286][ C0] Workqueue: bat_events batadv_nc_worker [ 588.455311][ C0] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 588.455330][ C0] Code: 20 36 e3 8b 48 c7 c6 60 36 e3 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 be 8e 26 07 48 89 44 24 08 [ 588.455344][ C0] RSP: 0018:ffffc90003e4f8d0 EFLAGS: 00000046 [ 588.455357][ C0] RAX: 0000000080000001 RBX: 0000000000000201 RCX: 6a33d9da3057b700 [ 588.455368][ C0] RDX: 0000000000000000 RSI: ffffffff8b89a700 RDI: ffffffff8be33680 [ 588.455379][ C0] RBP: ffffc90003e4f978 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 588.455392][ C0] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: ffffffff8b47da88 [ 588.455404][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff920007c9f1c [ 588.455416][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 588.455429][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.455440][ C0] CR2: 00007f30583b6038 CR3: 0000000032844000 CR4: 00000000003526f0 [ 588.455454][ C0] Call Trace: [ 588.455460][ C0] [ 588.455467][ C0] __local_bh_enable_ip+0x111/0x1c0 [ 588.455484][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 588.455500][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 588.455519][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 588.455538][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 588.455560][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 588.455580][ C0] ? rcu_is_watching+0x15/0xb0 [ 588.455599][ C0] batadv_nc_worker+0x369/0x610 [ 588.455619][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 588.455635][ C0] process_scheduled_works+0xae1/0x17b0 [ 588.455662][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 588.455683][ C0] worker_thread+0x8a0/0xda0 [ 588.455708][ C0] kthread+0x70e/0x8a0 [ 588.455727][ C0] ? __pfx_worker_thread+0x10/0x10 [ 588.455742][ C0] ? __pfx_kthread+0x10/0x10 [ 588.455760][ C0] ? rcu_is_watching+0x15/0xb0 [ 588.455774][ C0] ? __pfx_kthread+0x10/0x10 [ 588.455792][ C0] ret_from_fork+0x3f9/0x770 [ 588.455809][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 588.455826][ C0] ? __switch_to_asm+0x39/0x70 [ 588.455844][ C0] ? __switch_to_asm+0x33/0x70 [ 588.455862][ C0] ? __pfx_kthread+0x10/0x10 [ 588.455879][ C0] ret_from_fork_asm+0x1a/0x30 [ 588.455904][ C0] [ 588.713452][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 589.366731][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 589.373611][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 589.382717][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.392767][ T31] Call Trace: [ 589.396042][ T31] [ 589.398974][ T31] dump_stack_lvl+0x99/0x250 [ 589.403564][ T31] ? __asan_memcpy+0x40/0x70 [ 589.408155][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.413352][ T31] ? __pfx__printk+0x10/0x10 [ 589.417957][ T31] vpanic+0x281/0x750 [ 589.421943][ T31] ? __pfx_vpanic+0x10/0x10 [ 589.426443][ T31] ? preempt_schedule+0xae/0xc0 [ 589.431297][ T31] ? preempt_schedule_common+0x83/0xd0 [ 589.436758][ T31] panic+0xb9/0xc0 [ 589.440480][ T31] ? __pfx_panic+0x10/0x10 [ 589.444894][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 589.450271][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 589.456427][ T31] watchdog+0xfd2/0xfe0 [ 589.460587][ T31] ? watchdog+0x1de/0xfe0 [ 589.464919][ T31] kthread+0x70e/0x8a0 [ 589.468988][ T31] ? __pfx_watchdog+0x10/0x10 [ 589.473664][ T31] ? __pfx_kthread+0x10/0x10 [ 589.478252][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.483451][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.488646][ T31] ? __pfx_kthread+0x10/0x10 [ 589.493231][ T31] ret_from_fork+0x3f9/0x770 [ 589.497820][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 589.502926][ T31] ? __switch_to_asm+0x39/0x70 [ 589.507690][ T31] ? __switch_to_asm+0x33/0x70 [ 589.512456][ T31] ? __pfx_kthread+0x10/0x10 [ 589.517045][ T31] ret_from_fork_asm+0x1a/0x30 [ 589.521818][ T31] [ 589.525127][ T31] Kernel Offset: disabled [ 589.529439][ T31] Rebooting in 86400 seconds..