last executing test programs: 7m24.436644551s ago: executing program 4 (id=5628): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)='g', 0x1}], 0x1, 0x0, 0x0, 0x4004000}], 0x1, 0x20048044) ppoll(&(0x7f00000008c0)=[{r1, 0xa091}], 0x1, 0x0, 0x0, 0x0) 7m24.327609941s ago: executing program 4 (id=5632): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x1, 0x8000) 7m24.107928319s ago: executing program 4 (id=5633): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 7m22.171352037s ago: executing program 1 (id=5661): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 7m22.115694702s ago: executing program 1 (id=5663): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0x0) 7m21.987959081s ago: executing program 1 (id=5666): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 7m21.547614306s ago: executing program 1 (id=5669): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000740)}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) 7m20.525895028s ago: executing program 4 (id=5683): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00\x00\x008'], 0x50) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 7m20.475365057s ago: executing program 1 (id=5684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)='C', 0x1}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/20, 0x14}], 0x1}, 0xe}], 0x2, 0x2021, 0x0) 7m20.447015871s ago: executing program 4 (id=5685): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40804) 7m20.268818521s ago: executing program 1 (id=5689): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/126, 0x7e}], 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) shutdown(r0, 0x1) 7m20.042405559s ago: executing program 32 (id=5689): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/126, 0x7e}], 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) shutdown(r0, 0x1) 7m19.950185282s ago: executing program 4 (id=5694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) 7m19.664355032s ago: executing program 33 (id=5694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) 4m6.323164205s ago: executing program 0 (id=8429): socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0xa, 0xd}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m6.190475871s ago: executing program 0 (id=8430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) 4m6.056236866s ago: executing program 0 (id=8433): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 4m5.9677357s ago: executing program 0 (id=8434): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 4m5.813365015s ago: executing program 0 (id=8435): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x180000000) 4m5.618141723s ago: executing program 0 (id=8436): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000500)=[{&(0x7f0000000240)="ab", 0x1}], 0x1, 0x0) 3m50.498890994s ago: executing program 34 (id=8436): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000500)=[{&(0x7f0000000240)="ab", 0x1}], 0x1, 0x0) 2m25.582188785s ago: executing program 6 (id=9196): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 2m24.619371085s ago: executing program 6 (id=9202): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m24.454570672s ago: executing program 6 (id=9203): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r5, 0x12e9d000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) 2m24.383285288s ago: executing program 6 (id=9205): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 2m23.315429237s ago: executing program 6 (id=9216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$tun(r3, &(0x7f00000004c0)={@void, @val={0x1, 0x4, 0x0, 0x9, 0x9, 0xd}, @mpls={[{0x8, 0x0, 0x1}, {0x69}, {}, {0xd0, 0x0, 0x1}, {0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x98, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}], @llc={@snap={0xa8, 0xab, "8860", "32142f", 0x1c, "341f4103e0ae4b9ef8d1ab55e66734557b5e35cd3b4e296490cd84d56e7a1739dd0212cefc3e48a5d77bbc32819bbd52c538afc01e0ea5d92131b7b9c34582b9926ebf4a17597b946afdede392759ba484d148abb94b1deee17e42e0f484661f0d7b1dd32077c5b994907ff833f32fb850e61009c49d65eb92d62792ec31f838371fec68b1c19cea93ae313b6e0e72547f1304a0cea3c7fb27fd08df7966b2e890f763188a6204be4409fe9caaf6c48e550277a76ad1864d9f9489bc42791ff89c0386dd131b76f91da38d831c447ce59f6dc48300f5"}}}}, 0x111) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) 2m22.851137466s ago: executing program 6 (id=9222): syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) unshare(0x28000600) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0x7fffffff, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xbc}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2m7.841356315s ago: executing program 35 (id=9222): syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) unshare(0x28000600) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0x7fffffff, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0xbc}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x300, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 15.406562727s ago: executing program 5 (id=10116): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x5}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) close(0x4) 14.367313981s ago: executing program 5 (id=10126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r2 = epoll_create1(0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/91, 0x128000, 0x800, 0x0, 0x2}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1802004922d26254b0078344000100000000000000001000008500010087000000850f0000009500000000000000065e7553c846f2a67458de64eb308a27e9b0d8e1192c3f8f8b39aa171c29cecd839cf0c492cfc540f4c64e885e247843303dbeff6369e15b7caf1adb564d9c450440b4e7bc8f00"/130], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x0, r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000280)={0x80002019}) 13.678447187s ago: executing program 5 (id=10130): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) close(0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x4b, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}, 0x10) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 12.820551604s ago: executing program 5 (id=10135): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x20000000) 6.564208822s ago: executing program 5 (id=10163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x80000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) unshare(0x62040200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfd, {0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x240c0000}, 0x20000040) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 5.788092047s ago: executing program 5 (id=10169): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x2, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000400], 0x0, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0xc, 0x0, 0x88fb, 'vlan1\x00', 'rose0\x00', 'veth0_to_hsr\x00', 'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x1a6) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000400) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0xc040ff0b, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e24, 0x3, 0x8, 0x200}}, 0x44) 4.382137608s ago: executing program 7 (id=10179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.177200769s ago: executing program 7 (id=10190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x72b923, 0x80003, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.929936946s ago: executing program 7 (id=10182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x1, 0xb}, {0x8, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffffc01}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.770200071s ago: executing program 7 (id=10183): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="061000fbedffffffff0f00000733f5"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="0c009900090000950000000008005200", @ANYRES32=r3], 0x30}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20004004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, 0x0, 0x40) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x880) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) 3.198049602s ago: executing program 7 (id=10189): socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x50) pipe(&(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.978806368s ago: executing program 3 (id=10193): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="2190", 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}, 0x810) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81004e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x4) 2.435032783s ago: executing program 8 (id=10198): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000c40, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 2.204730463s ago: executing program 3 (id=10199): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) pipe(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x3, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8, 0x80, 0x1, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x6, 0x8000, 0x5b, 0x20, 0xffffffffffffffff, 0xdb, '\x00', 0x0, r0, 0x3, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x400, 0x5, 0x0, 0x12, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, 0x0, &(0x7f0000000740)='%pS \x00'}, 0x20) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r3}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf18, 0x0, 0x0, 0x0, 0xf2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', r1, @fallback=0x1f, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0xb, 0xd, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000940)=[{0x0, 0x1, 0xb, 0xc}, {0x5, 0x3, 0x9, 0x5}, {0x2, 0x3, 0x10, 0x1}], 0x10, 0x580}, 0x94) 2.036819042s ago: executing program 8 (id=10202): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000005c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x73139b57}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x40844}}], 0x1, 0x1) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) unshare(0x62040200) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 1.998636155s ago: executing program 3 (id=10203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x38, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x38}}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c3"], 0x310) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x39) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b80080009000000000008"], 0x184}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x84) 1.807942679s ago: executing program 3 (id=10204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.609826226s ago: executing program 8 (id=10205): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) 1.569870907s ago: executing program 3 (id=10206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x1, 0xb}, {0x8, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffffc01}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.514395733s ago: executing program 8 (id=10207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002940)={'syztnl1\x00', &(0x7f00000028c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x7, 0x0, 0x4, @empty, @local, 0x7800, 0x700, 0x200, 0x37ac59ef}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x4000) write$rfkill(r0, &(0x7f00000025c0)={0x10001, 0x7, 0x3, 0x1}, 0x8) getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080)) sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dd", 0x46}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000080)="3b2f42080c8d49d7238ba3cf091b433f28cd60c2c3e3917151156fbf2711", 0xfffffc43}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b95ff3461cadb5ff282471e30d4fab85909d7c1b04a28c26e6256ff6c75ca8d5200d239f187830c755a267aaf7af49921be2f882f26d9f74c850b65d6ef250bca001e70a2cd8d523c0b71a7377d598b494cccd68e3d4bf378bfd9df0d8ea28923b63184449c78031d6c736e638fda62ad7971b583", 0xa2}, {&(0x7f0000000340)="ef648434b9034870d043039407c3b1b07a75ee0c550bd64654c7ada40f6f6ef6a5c5fb8345f32b0f549a8fbf85264caff0b839dd748fec4b052c4f0d152c80c700f4b86de88dbd046b838f2b659c890e0ab56fc3a92f74e42caf85cd7267fabeef72599a6b73c56939d9c5c1116d39ce0df9ee4b355f89b9fc2b651d28e2c961aa12e584ee3b", 0x86}, {&(0x7f0000000400)="03802e32b59b4735cde66da12d219704f9cef1779ad81d7e8d8c6ac93f0f9b1a42c0feb9fa792769f390914ff6423a6c2fbca23a925d3529297d8ef23611cd1abaeb17ad9edbec0a8e62da3d21578d2f0197bfdd390f53eba02169162b4c0224b679c5e15f9ccbdc15ca8f05d54d6c73cf7d40a11e3156b3feeea4a98c7a199b2b14ca13920d7b0109372c18ffaf4d894cea0cdec047fa82f801acc706a02a57fc7c468a2cd9847cdee0875e59446f1fe4", 0xb1}], 0x8, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002580), 0x4) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 1.476351383s ago: executing program 2 (id=10208): r0 = socket$inet6(0xa, 0x3, 0x3c) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(0xffffffffffffffff) 1.344984532s ago: executing program 3 (id=10209): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1) 1.288814151s ago: executing program 8 (id=10210): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r5, 0x0, 0x0, 0x80000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.175154484s ago: executing program 2 (id=10211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x70bd29, 0x25dfdbde, {0x0, 0x0, 0x74, 0x0, 0xdc05, 0x75007}}, 0x20}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr=0x64010101, @broadcast, 0xffffff00, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2, 0x2, 0x20}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x10000, 0x8, 0x2, 0x2, 0x7d39bf5d, 0x5, 0x9, 0xe]}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, 'pim6reg\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4}, 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000440)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b704000000000020850000000100000018010000202070250000000000202020630af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x11, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'gre0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001900290029bd7000fbdbdf2102201000fd03"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 784.078807ms ago: executing program 2 (id=10212): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @empty, 0x4}}, 0x0, 0x0, 0x40, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 715.060626ms ago: executing program 2 (id=10213): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) pipe(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x3, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8, 0x80, 0x1, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x6, 0x8000, 0x5b, 0x20, 0xffffffffffffffff, 0xdb, '\x00', 0x0, r0, 0x3, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x400, 0x5, 0x0, 0x12, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, 0x0, &(0x7f0000000740)='%pS \x00'}, 0x20) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r3}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf18, 0x0, 0x0, 0x0, 0xf2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', r1, @fallback=0x1f, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0xb, 0xd, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000940)=[{0x0, 0x1, 0xb, 0xc}, {0x5, 0x3, 0x9, 0x5}, {0x2, 0x3, 0x10, 0x1}], 0x10, 0x580}, 0x94) 474.108019ms ago: executing program 2 (id=10214): r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="005b5ec434b006cb4df2a3e82f13a500"/31], 0x48) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x1, 0x3}, {0xfffffffffffffffc, 0x0, 0x1000000}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40040) accept(r1, &(0x7f0000000140)=@can, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_bond\x00', {'caif0\x00'}, 0x9}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000009cb9e0e86635227b75f6d81bcc3a0682873c680266464945627fa3b04a59f18f3355df1ae65cb025402b258a85ed06b232170fe2e2d98ee974aedf4fd8fa8ea6b178adb36928eebb192ce4022d07295b88797d3efcf2b557324cff69d35bf4032b38a062652c214c43fc4b523ce0000000000000ee00000000", @ANYRES16=r0, @ANYBLOB="070627bf7000fcdbdf252d0000000a0001007770616e3100000008002f0064090000"], 0x28}}, 0x4008010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x114}, 0x80) 191.037232ms ago: executing program 2 (id=10215): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="43bdb4", 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x80) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=0x8, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0xffff, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x2000000000000048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xa7) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000180), 0x0}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x114, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) 145.129638ms ago: executing program 8 (id=10216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 7 (id=10217): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): 915': attribute type 4 has an invalid length. [ 619.229024][T27611] wg1 speed is unknown, defaulting to 1000 [ 619.662586][T27621] bridge8: entered allmulticast mode [ 619.693310][T27623] syzkaller0: entered promiscuous mode [ 619.706755][T27623] syzkaller0: entered allmulticast mode [ 620.075651][T27643] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8926'. [ 620.175991][T27650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8928'. [ 620.204168][T27643] netlink: 'syz.6.8926': attribute type 5 has an invalid length. [ 620.235789][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8926'. [ 620.649395][T27659] syzkaller0: entered promiscuous mode [ 620.655139][T27659] syzkaller0: entered allmulticast mode [ 621.738772][T27678] netlink: 200 bytes leftover after parsing attributes in process `syz.7.8936'. [ 621.749626][T27678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8936'. [ 623.170309][T27694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8939'. [ 623.343699][T27697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8939'. [ 624.120253][T27715] netlink: 'syz.7.8945': attribute type 4 has an invalid length. [ 624.705910][T27728] netlink: 'syz.5.8950': attribute type 12 has an invalid length. [ 624.772188][T27730] wg1 speed is unknown, defaulting to 1000 [ 625.302549][T27740] syzkaller1: entered promiscuous mode [ 625.322371][T27740] syzkaller1: entered allmulticast mode [ 625.372193][T27737] wg1 speed is unknown, defaulting to 1000 [ 625.809776][T27760] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 626.732224][T27789] syzkaller0: entered promiscuous mode [ 626.739022][T27789] syzkaller0: entered allmulticast mode [ 627.280315][T27800] bond0: (slave bond_slave_0): Releasing backup interface [ 627.349946][T27800] bond0: (slave bond_slave_1): Releasing backup interface [ 627.372778][T27800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 627.782939][T27820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8980'. [ 627.912246][T27826] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8983'. [ 628.015946][T27830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8984'. [ 628.259930][T27833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8985'. [ 628.309283][T27810] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 628.512793][T27841] syzkaller0: entered promiscuous mode [ 628.518680][T27841] syzkaller0: entered allmulticast mode [ 630.541993][T27850] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8991'. [ 630.580072][T27846] wg1 speed is unknown, defaulting to 1000 [ 631.162908][T27877] wg1 speed is unknown, defaulting to 1000 [ 631.375267][T27888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9003'. [ 631.462211][T27889] wg1 speed is unknown, defaulting to 1000 [ 631.730297][T27895] xt_connbytes: Forcing CT accounting to be enabled [ 631.770187][T27898] wg1 speed is unknown, defaulting to 1000 [ 631.778397][T27884] mpoa:mpoad_close: () going down [ 632.082282][T27906] wg1 speed is unknown, defaulting to 1000 [ 632.825189][T27930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 633.274047][T27939] wg1 speed is unknown, defaulting to 1000 [ 633.354922][T27943] syzkaller0: entered promiscuous mode [ 633.361376][T27943] syzkaller0: entered allmulticast mode [ 633.487223][T27949] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9018'. [ 633.974478][T27961] syzkaller0: entered promiscuous mode [ 633.985376][T27961] syzkaller0: entered allmulticast mode [ 634.140559][T27979] tipc: Failed to remove unknown binding: 66,1,1/2886997007:454464926/454464928 [ 634.166313][T27979] tipc: Failed to remove unknown binding: 66,1,1/2886997007:454464926/454464928 [ 634.172307][T27957] syzkaller0: entered promiscuous mode [ 634.181120][T27957] syzkaller0: entered allmulticast mode [ 634.247359][T27969] syzkaller1: entered promiscuous mode [ 634.254017][T27969] syzkaller1: entered allmulticast mode [ 638.205557][T28039] wg1 speed is unknown, defaulting to 1000 [ 638.815663][T28054] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9040'. [ 639.021640][T28057] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 639.366782][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9044'. [ 639.378934][T28065] wg1 speed is unknown, defaulting to 1000 [ 639.696198][T28074] 8021q: adding VLAN 0 to HW filter on device bond8 [ 639.786927][T28082] macvlan0: entered promiscuous mode [ 639.812922][T28082] macvlan0: entered allmulticast mode [ 639.827769][T28082] bond8: entered promiscuous mode [ 639.841166][T28082] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 640.239563][T28082] bond8: left promiscuous mode [ 640.694972][T28096] wg1 speed is unknown, defaulting to 1000 [ 640.839021][T28101] netlink: 'syz.2.9055': attribute type 10 has an invalid length. [ 641.665813][T28116] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9060'. [ 641.910290][T28125] syzkaller0: entered promiscuous mode [ 641.916076][T28125] syzkaller0: entered allmulticast mode [ 642.298675][T28140] netlink: 308 bytes leftover after parsing attributes in process `syz.6.9067'. [ 642.309926][T28140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9067'. [ 642.681904][T28153] netlink: 'syz.7.9079': attribute type 1 has an invalid length. [ 642.683386][T28151] syzkaller0: entered promiscuous mode [ 642.695962][T28151] syzkaller0: entered allmulticast mode [ 642.706976][T28153] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9079'. [ 642.867030][T28162] sctp: [Deprecated]: syz.7.9072 (pid 28162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.867030][T28162] Use struct sctp_sack_info instead [ 643.222670][T28168] wg1 speed is unknown, defaulting to 1000 [ 643.236083][T28165] netlink: 'syz.3.9073': attribute type 12 has an invalid length. [ 643.255703][T28165] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.9073'. [ 643.468628][T28179] syzkaller0: entered promiscuous mode [ 643.474156][T28179] syzkaller0: entered allmulticast mode [ 643.768069][T28187] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9078'. [ 643.796261][T28187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9078'. [ 643.978874][T28191] sctp: [Deprecated]: syz.3.9080 (pid 28191) Use of int in max_burst socket option deprecated. [ 643.978874][T28191] Use struct sctp_assoc_value instead [ 644.010567][T28191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9080'. [ 644.121869][T28201] syzkaller0: entered promiscuous mode [ 644.149864][T28201] syzkaller0: entered allmulticast mode [ 644.601968][T28213] vxcan1: entered allmulticast mode [ 645.554168][T28236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9094'. [ 645.593747][T28236] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 645.630090][T28236] team0: entered promiscuous mode [ 645.635639][T28236] team0: entered allmulticast mode [ 645.665925][T28237] atm:sigd_send: bad message type 36 [ 645.707710][T28242] wg1 speed is unknown, defaulting to 1000 [ 646.265110][T28256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9099'. [ 647.119880][T28273] wg1 speed is unknown, defaulting to 1000 [ 647.221811][T28279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9108'. [ 647.369698][T28280] netlink: 'syz.3.9108': attribute type 4 has an invalid length. [ 647.391006][T28280] netlink: 'syz.3.9108': attribute type 4 has an invalid length. [ 647.412926][T28286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9111'. [ 647.812461][T28297] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9115'. [ 648.000029][T28303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9115'. [ 648.107648][T28290] wg1 speed is unknown, defaulting to 1000 [ 648.602719][T28316] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 648.660353][T28318] bridge1: entered allmulticast mode [ 648.826812][T28320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9125'. [ 648.963136][T28330] syzkaller1: entered promiscuous mode [ 648.976175][T28330] syzkaller1: entered allmulticast mode [ 649.012386][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9125'. [ 650.257459][T28365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9140'. [ 650.267627][T28368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9139'. [ 650.691778][T28386] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9147'. [ 650.733921][T28386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.791195][T28386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.811119][T28386] bond1: (slave bond0): Enslaving as an active interface with an up link [ 650.924499][T28392] bond1 (unregistering): (slave bond0): Releasing backup interface [ 650.941048][T28392] bond1 (unregistering): Released all slaves [ 650.984202][T28390] wg1 speed is unknown, defaulting to 1000 [ 651.504870][T28408] tipc: Invalid UDP bearer configuration [ 651.504925][T28408] tipc: Enabling of bearer rejected, failed to enable media [ 651.773556][T28411] wg1 speed is unknown, defaulting to 1000 [ 652.248374][T28423] netlink: 'syz.5.9158': attribute type 1 has an invalid length. [ 652.298566][T28423] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9158'. [ 652.341648][T28423] 8021q: adding VLAN 0 to HW filter on device bond5 [ 652.681964][T28432] syzkaller0: entered promiscuous mode [ 652.695190][T28432] syzkaller0: entered allmulticast mode [ 653.287845][T28434] wg1 speed is unknown, defaulting to 1000 [ 654.566519][T28471] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9172'. [ 654.659730][T28471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9172'. [ 654.892757][T28478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9175'. [ 654.936835][T28478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9175'. [ 655.168795][T28484] wg1 speed is unknown, defaulting to 1000 [ 655.477862][T28502] wg1 speed is unknown, defaulting to 1000 [ 656.636415][ T30] audit: type=1800 audit(1760588505.462:13): pid=28532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9185" name="memory.events" dev="tmpfs" ino=3376 res=0 errno=0 [ 656.849027][T28540] netlink: 'syz.5.9188': attribute type 10 has an invalid length. [ 656.877877][T28540] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9188'. [ 657.019943][T28540] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 657.330012][T28558] wg1 speed is unknown, defaulting to 1000 [ 657.581207][T28564] syzkaller0: entered promiscuous mode [ 657.591972][T28564] syzkaller0: entered allmulticast mode [ 658.004501][T28573] wg1 speed is unknown, defaulting to 1000 [ 658.008175][T28579] syzkaller0: entered promiscuous mode [ 658.017034][T28579] syzkaller0: entered allmulticast mode [ 658.261424][T28581] syzkaller0: entered promiscuous mode [ 658.278698][T28581] syzkaller0: entered allmulticast mode [ 658.839798][T28596] netlink: 'syz.2.9206': attribute type 1 has an invalid length. [ 658.929874][T28600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9206'. [ 658.935984][T28596] bond10: entered promiscuous mode [ 658.954882][T28596] 8021q: adding VLAN 0 to HW filter on device bond10 [ 658.963013][T28600] bond10: entered allmulticast mode [ 659.137611][T28596] bond10: (slave bridge15): making interface the new active one [ 659.145282][T28596] bridge15: entered promiscuous mode [ 659.166492][T28596] bridge15: entered allmulticast mode [ 659.194663][T28596] bond10: (slave bridge15): Enslaving as an active interface with an up link [ 659.480568][T28604] syzkaller0: entered promiscuous mode [ 659.506599][T28604] syzkaller0: entered allmulticast mode [ 659.621452][T28621] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 659.632897][T28618] wg1 speed is unknown, defaulting to 1000 [ 659.794150][T28622] wg1 speed is unknown, defaulting to 1000 [ 659.944851][T28629] netlink: 277 bytes leftover after parsing attributes in process `syz.6.9216'. [ 660.172447][T28641] tipc: Enabling of bearer rejected, failed to enable media [ 660.430034][T28655] wg1 speed is unknown, defaulting to 1000 [ 660.449842][T28657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9224'. [ 660.691572][T28668] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 660.942765][T28670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.244685][T28683] wg1 speed is unknown, defaulting to 1000 [ 661.421768][T28689] netlink: 'syz.7.9233': attribute type 1 has an invalid length. [ 661.498751][T28689] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 661.518700][T28689] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 661.553541][T28693] vlan2: entered allmulticast mode [ 661.558973][T28693] bridge0: entered allmulticast mode [ 661.565306][T28693] bridge0: entered promiscuous mode [ 661.571564][T28693] bridge0: left promiscuous mode [ 661.579747][T28693] bond1: (slave vlan2): making interface the new active one [ 661.588406][T28693] bridge0: entered promiscuous mode [ 661.594179][T28693] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 661.600870][T28692] block nbd4: Unsupported socket: should be TCP or UNIX. [ 661.721389][T28698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9236'. [ 661.733062][T28698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9236'. [ 661.920715][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9240'. [ 662.122653][T28714] netlink: 5116 bytes leftover after parsing attributes in process `syz.2.9242'. [ 662.699702][T28725] netlink: 'syz.7.9247': attribute type 1 has an invalid length. [ 662.708141][T28725] netlink: 'syz.7.9247': attribute type 1 has an invalid length. [ 663.019747][T28734] tipc: Enabled bearer , priority 0 [ 663.028759][T28734] syzkaller0: entered promiscuous mode [ 663.034254][T28734] syzkaller0: entered allmulticast mode [ 663.051223][T28734] tipc: Resetting bearer [ 663.059271][T28733] tipc: Resetting bearer [ 663.088657][T28733] tipc: Disabling bearer [ 663.932481][T28765] wg1 speed is unknown, defaulting to 1000 [ 665.125339][T28792] wg1 speed is unknown, defaulting to 1000 [ 665.666068][T28806] syzkaller0: entered promiscuous mode [ 665.672327][T28806] syzkaller0: entered allmulticast mode [ 665.725319][T28806] tipc: Started in network mode [ 665.732707][T28806] tipc: Node identity 3a2813aab94f, cluster identity 4711 [ 665.745150][T28806] tipc: Enabled bearer , priority 0 [ 665.768374][T28804] wg1 speed is unknown, defaulting to 1000 [ 665.897858][T28805] tipc: Resetting bearer [ 665.967732][T28805] tipc: Disabling bearer [ 666.090727][T28814] netlink: 'syz.3.9269': attribute type 1 has an invalid length. [ 666.213208][T28818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9269'. [ 666.524172][T28817] bond8: (slave veth27): Enslaving as an active interface with a down link [ 666.570588][T28818] bond8 (unregistering): (slave veth27): Releasing active interface [ 666.600125][T28818] bond8 (unregistering): Released all slaves [ 666.823782][T28824] wg1 speed is unknown, defaulting to 1000 [ 666.875075][T28829] wg1 speed is unknown, defaulting to 1000 [ 666.962280][T28832] wg1 speed is unknown, defaulting to 1000 [ 667.633331][T28847] wg1 speed is unknown, defaulting to 1000 [ 667.641781][T28849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9277'. [ 667.664733][T28849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9277'. [ 667.932752][T28855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9279'. [ 667.981235][T28855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9279'. [ 668.899524][T28878] syz_tun: entered allmulticast mode [ 669.100793][T28883] syzkaller0: entered promiscuous mode [ 669.106591][T28883] syzkaller0: entered allmulticast mode [ 669.487250][T28897] netlink: 'syz.5.9293': attribute type 1 has an invalid length. [ 669.663513][T28897] bond6: entered promiscuous mode [ 669.669259][T28897] 8021q: adding VLAN 0 to HW filter on device bond6 [ 669.743367][T28906] 8021q: adding VLAN 0 to HW filter on device bond7 [ 669.752558][T28906] bond6: (slave bond7): making interface the new active one [ 669.766575][T28906] bond7: entered promiscuous mode [ 669.772665][T28906] bond6: (slave bond7): Enslaving as an active interface with an up link [ 669.891333][T28902] wg1 speed is unknown, defaulting to 1000 [ 670.759995][T28926] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9301'. [ 672.100067][T28928] wg1 speed is unknown, defaulting to 1000 [ 672.345544][T28949] wg1 speed is unknown, defaulting to 1000 [ 672.454990][T28958] tipc: New replicast peer: 255.255.255.255 [ 672.462067][T28958] tipc: Enabled bearer , priority 10 [ 672.934666][T28967] wg1 speed is unknown, defaulting to 1000 [ 673.049916][T28970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9313'. [ 673.655482][T28986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9320'. [ 673.772047][T28990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9321'. [ 673.782476][T28990] netlink: 'syz.2.9321': attribute type 1 has an invalid length. [ 673.799218][T28990] batadv_slave_0: left promiscuous mode [ 673.805143][T28990] gretap1: left promiscuous mode [ 673.810361][T28990] bond1: left promiscuous mode [ 673.817444][T28990] macsec3: left promiscuous mode [ 673.822943][T28990] bridge3: left promiscuous mode [ 673.828640][ T9736] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 673.844382][T28990] bond0: left promiscuous mode [ 673.852472][T28990] bridge4: left promiscuous mode [ 673.863829][T28990] team1: left promiscuous mode [ 673.874028][T28990] bond7: left promiscuous mode [ 673.886794][T28990] bridge8: left promiscuous mode [ 673.898767][ T9736] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 673.909224][T28990] vlan0: left promiscuous mode [ 673.914084][T28990] geneve1: left promiscuous mode [ 673.921169][T28990] bond10: left promiscuous mode [ 673.928583][T28990] bridge15: left promiscuous mode [ 674.087356][T28997] pimreg3: entered allmulticast mode [ 674.362473][T29004] netlink: 'syz.2.9326': attribute type 1 has an invalid length. [ 674.398692][T29002] syzkaller0: entered promiscuous mode [ 674.411906][T29002] syzkaller0: entered allmulticast mode [ 674.435803][T29004] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 674.448561][T29004] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 674.504872][T29006] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9325'. [ 674.578122][T29007] bond11: (slave bridge18): Enslaving as an active interface with a down link [ 674.661651][T29004] macvlan0: entered promiscuous mode [ 674.669116][T29004] macvlan0: entered allmulticast mode [ 674.675401][T29004] bond11: entered promiscuous mode [ 674.681713][T29004] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 674.692750][T29004] bond11: left promiscuous mode [ 674.759057][T29011] syzkaller0: entered promiscuous mode [ 674.765890][T29011] syzkaller0: entered allmulticast mode [ 674.960966][T29022] syzkaller0: entered promiscuous mode [ 674.974275][T29022] syzkaller0: entered allmulticast mode [ 675.112493][T29033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9335'. [ 675.279022][T29036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9337'. [ 675.610569][T29042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.723690][T29042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 676.069864][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 676.086459][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 676.095004][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 676.105010][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 676.115721][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 676.200445][T29042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.396914][T29042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 676.522224][T29042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.533737][T29042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 676.554381][T29043] wg1 speed is unknown, defaulting to 1000 [ 676.623097][T29042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.643777][T29042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 676.678050][T29055] netlink: 240 bytes leftover after parsing attributes in process `syz.5.9342'. [ 676.791449][T29060] tipc: Enabled bearer , priority 0 [ 676.833038][T29060] syzkaller0: entered promiscuous mode [ 676.847508][T29062] Bluetooth: hci0: unsupported parameter 512 [ 676.853633][T29060] syzkaller0: entered allmulticast mode [ 676.859600][T29062] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 677.013313][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.022850][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 677.041474][T29060] tipc: Resetting bearer [ 677.080331][T29058] tipc: Resetting bearer [ 677.103166][T29058] tipc: Disabling bearer [ 677.112945][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.121375][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 677.133568][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.141808][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 677.224730][T29074] syzkaller0: entered promiscuous mode [ 677.235732][T29074] syzkaller0: entered allmulticast mode [ 677.254143][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.262494][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 677.305930][T29043] chnl_net:caif_netlink_parms(): no params data found [ 678.240217][ T5843] Bluetooth: hci6: command tx timeout [ 679.199272][T29043] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.216720][T29043] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.227173][T29043] bridge_slave_0: entered allmulticast mode [ 679.241265][T29043] bridge_slave_0: entered promiscuous mode [ 679.264663][T29043] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.273816][T29043] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.284873][T29043] bridge_slave_1: entered allmulticast mode [ 679.297768][T29043] bridge_slave_1: entered promiscuous mode [ 679.364184][T29106] wg1 speed is unknown, defaulting to 1000 [ 679.401644][T29043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.527866][T29043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.647513][T29043] team0: Port device team_slave_0 added [ 679.672932][T29043] team0: Port device team_slave_1 added [ 679.757629][T29043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.765260][T29043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.791909][T29043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.800943][T29124] netlink: 'syz.5.9362': attribute type 1 has an invalid length. [ 679.806954][T29043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.817522][T29043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.848313][T29043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.895076][T29124] 8021q: adding VLAN 0 to HW filter on device bond8 [ 679.908815][T29125] bond8: entered allmulticast mode [ 679.991618][T29124] bond8: (slave ip6gretap1): making interface the new active one [ 679.999717][T29124] ip6gretap1: entered allmulticast mode [ 680.007998][T29124] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 680.038204][T29043] hsr_slave_0: entered promiscuous mode [ 680.045159][T29043] hsr_slave_1: entered promiscuous mode [ 680.052460][T29043] debugfs: 'hsr0' already exists in 'hsr' [ 680.058368][T29043] Cannot create hsr debugfs directory [ 680.226541][T29137] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9365'. [ 680.317616][ T5843] Bluetooth: hci6: command tx timeout [ 680.530368][T29043] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 680.552230][T29043] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 680.570174][T29142] tipc: Enabled bearer , priority 0 [ 680.578453][T29043] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 680.597434][T29140] tipc: Resetting bearer [ 680.671881][T29140] tipc: Disabling bearer [ 680.703196][T29043] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 680.738376][T29148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9370'. [ 680.788164][T29154] syzkaller0: entered promiscuous mode [ 680.793817][T29154] syzkaller0: entered allmulticast mode [ 680.832306][T29148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9370'. [ 681.025104][T29043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.078087][T29162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9372'. [ 681.102967][T29043] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.111162][T29166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9374'. [ 681.128037][T29166] netlink: 'syz.2.9374': attribute type 1 has an invalid length. [ 681.193711][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.200965][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.226968][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.234209][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.257715][T29171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9374'. [ 681.317079][T29170] wg1 speed is unknown, defaulting to 1000 [ 681.325756][T29171] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 681.732216][T29178] syzkaller0: entered promiscuous mode [ 681.737916][T29178] syzkaller0: entered allmulticast mode [ 681.924036][T29188] digital: digital_start_poll: Unknown protocol [ 682.398400][ T5843] Bluetooth: hci6: command tx timeout [ 683.397009][T29183] syzkaller0: entered promiscuous mode [ 683.404609][T29183] syzkaller0: entered allmulticast mode [ 683.478867][T29194] tipc: Enabled bearer , priority 0 [ 683.499422][T29179] tipc: Resetting bearer [ 683.540106][T29179] tipc: Disabling bearer [ 683.607074][T29043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.759817][T29205] tipc: Enabled bearer , priority 0 [ 683.785762][T29210] syzkaller0: entered promiscuous mode [ 683.794094][T29212] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9384'. [ 683.814093][T29210] syzkaller0: entered allmulticast mode [ 683.846863][T29205] tipc: Resetting bearer [ 683.852671][T29205] syzkaller0: tun_net_xmit 90 [ 683.895966][T29204] tipc: Resetting bearer [ 683.914605][T29219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9387'. [ 683.941748][T29219] block nbd0: reconnected socket [ 683.957358][T29219] nbd: socks must be embedded in a SOCK_ITEM attr [ 683.977978][T29204] tipc: Disabling bearer [ 684.052054][ T5843] block nbd0: Receive control failed (result -32) [ 684.082820][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.128658][T29221] syzkaller0: entered promiscuous mode [ 684.134345][T29221] syzkaller0: entered allmulticast mode [ 684.223982][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.318753][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.374899][T29043] veth0_vlan: entered promiscuous mode [ 684.408670][ T13] team0: Port device netdevsim0 removed [ 684.425255][T29043] veth1_vlan: entered promiscuous mode [ 684.463765][T29043] veth0_macvtap: entered promiscuous mode [ 684.474285][T29043] veth1_macvtap: entered promiscuous mode [ 684.480962][ T5843] Bluetooth: hci6: command tx timeout [ 684.511274][T29043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.526975][T29043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.555343][T27148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.573590][T10227] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.594975][T10227] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.604338][T10227] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.614464][ T13] bridge_slave_1: left allmulticast mode [ 684.620273][ T13] bridge_slave_1: left promiscuous mode [ 684.626062][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.637965][ T13] bridge_slave_0: left allmulticast mode [ 684.644015][ T13] bridge_slave_0: left promiscuous mode [ 684.650071][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.137195][T29247] netlink: 'syz.2.9395': attribute type 1 has an invalid length. [ 685.147625][ T13] bond0 (unregistering): (slave geneve3): Releasing active interface [ 685.178293][ T13] bond6 (unregistering): (slave geneve0): Releasing active interface [ 685.269018][ T13] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 685.411785][ T13] bond1 (unregistering): Released all slaves [ 685.514531][ T13] bond2 (unregistering): Released all slaves [ 685.624003][ T13] bond3 (unregistering): (slave bond4): Releasing backup interface [ 685.632232][ T13] bond4 (unregistering): left promiscuous mode [ 685.639654][ T13] bond3 (unregistering): Released all slaves [ 685.744144][ T13] bond4 (unregistering): Released all slaves [ 685.764531][ T13] bond5 (unregistering): Released all slaves [ 685.875021][ T13] bond6 (unregistering): Released all slaves [ 685.975873][ T13] bond7 (unregistering): Released all slaves [ 686.072661][ T13] bond0 (unregistering): Released all slaves [ 686.092976][T29236] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 686.097690][T29247] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 686.104405][T29236] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 686.114452][T29253] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 686.123307][T29236] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 686.308013][ T13] tipc: Left network mode [ 686.382796][T10227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.405094][T10227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.573639][T27148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.590609][T27148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.714443][T29278] netlink: 'syz.2.9402': attribute type 1 has an invalid length. [ 686.755673][T29278] 8021q: adding VLAN 0 to HW filter on device bond12 [ 686.912666][ T13] veth1_to_team: left promiscuous mode [ 686.929594][ T13] hsr_slave_0: left promiscuous mode [ 686.942181][ T13] hsr_slave_1: left promiscuous mode [ 686.961148][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.972663][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.981768][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.007807][ T13] veth0_macvtap: left promiscuous mode [ 687.014202][ T13] veth0_vlan: left promiscuous mode [ 687.657109][ T13] team0 (unregistering): Port device team_slave_1 removed [ 688.206582][T29278] ipvlan0: entered allmulticast mode [ 688.211979][T29278] bond12: entered allmulticast mode [ 688.232884][T29283] bond12: (slave gretap3): making interface the new active one [ 688.245971][T29283] gretap3: entered allmulticast mode [ 688.256496][T29283] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 688.304075][T29304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9406'. [ 688.332636][T29288] team0: Port device team_slave_0 removed [ 688.558163][T29313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9409'. [ 688.599772][T29313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.611865][ T13] IPVS: stop unused estimator thread 0... [ 688.719018][T29312] syzkaller0: entered allmulticast mode [ 688.800378][T29325] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 689.092101][T29331] netlink: 'syz.2.9416': attribute type 1 has an invalid length. [ 690.988433][T29354] vlan3: entered promiscuous mode [ 690.996600][T29354] bond0: entered promiscuous mode [ 691.001666][T29354] bond_slave_0: entered promiscuous mode [ 691.033214][T29354] bond_slave_1: entered promiscuous mode [ 691.265617][T29366] Bluetooth: MGMT ver 1.23 [ 691.295605][T29367] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 691.536046][T29371] wg1 speed is unknown, defaulting to 1000 [ 691.925705][T29381] tipc: Enabled bearer , priority 0 [ 691.934253][T29381] syzkaller0: entered promiscuous mode [ 691.940841][T29381] syzkaller0: entered allmulticast mode [ 692.008530][T29381] tipc: Resetting bearer [ 692.097117][T29380] tipc: Resetting bearer [ 692.182660][T29380] tipc: Disabling bearer [ 692.443261][T29388] syzkaller1: entered promiscuous mode [ 692.449105][T29388] syzkaller1: entered allmulticast mode [ 692.596892][T29395] syzkaller0: entered promiscuous mode [ 692.622142][T29395] syzkaller0: entered allmulticast mode [ 693.081674][T29404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9437'. [ 693.096374][T29404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9437'. [ 693.131510][T29404] netlink: 'syz.2.9437': attribute type 1 has an invalid length. [ 693.142006][T29404] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9437'. [ 693.154108][T29404] block nbd4: Unsupported socket: should be TCP or UNIX. [ 693.352609][T29412] bond8: entered promiscuous mode [ 693.358035][T29412] bond8: entered allmulticast mode [ 693.363901][T29412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 693.456451][T29408] nbd3: detected capacity change from 0 to 63 [ 693.516083][T29411] block nbd3: NBD_DISCONNECT [ 693.523481][ T5845] Bluetooth: hci6: command 0x0405 tx timeout [ 693.532118][T29411] block nbd3: Disconnected due to user request. [ 693.559041][T29411] block nbd3: shutting down sockets [ 694.230315][T29429] syzkaller0: entered promiscuous mode [ 694.235837][T29429] syzkaller0: entered allmulticast mode [ 694.952091][T29443] wg1 speed is unknown, defaulting to 1000 [ 696.243207][T29458] tipc: Enabled bearer , priority 0 [ 696.269253][T29458] syzkaller0: entered promiscuous mode [ 696.295197][T29458] syzkaller0: entered allmulticast mode [ 696.617255][T29465] tipc: Resetting bearer [ 696.671659][T29457] tipc: Resetting bearer [ 696.716623][T29457] tipc: Disabling bearer [ 696.766658][T29470] syzkaller0: entered promiscuous mode [ 696.772167][T29470] syzkaller0: entered allmulticast mode [ 696.811292][T29469] tipc: Enabled bearer , priority 0 [ 696.876804][T29471] syzkaller0: entered promiscuous mode [ 696.882318][T29471] syzkaller0: entered allmulticast mode [ 696.979250][T29469] tipc: Resetting bearer [ 696.998951][T29468] tipc: Resetting bearer [ 697.067548][T29468] tipc: Disabling bearer [ 697.094359][T29474] netlink: 'syz.3.9454': attribute type 12 has an invalid length. [ 697.108558][T29474] netlink: 'syz.3.9454': attribute type 4 has an invalid length. [ 697.380681][T29485] tipc: Enabled bearer , priority 0 [ 697.416589][T29485] syzkaller0: entered promiscuous mode [ 697.422096][T29485] syzkaller0: entered allmulticast mode [ 697.493724][T29485] tipc: Resetting bearer [ 697.510747][T29482] tipc: Resetting bearer [ 697.559465][T29491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9461'. [ 697.571519][T29482] tipc: Disabling bearer [ 697.730774][T29501] netlink: 'syz.7.9465': attribute type 1 has an invalid length. [ 697.738976][T29493] syzkaller0: entered promiscuous mode [ 697.744659][T29493] syzkaller0: entered allmulticast mode [ 697.844812][T29501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 697.915586][T29508] macvlan1: entered allmulticast mode [ 697.974751][T29508] veth1_vlan: entered allmulticast mode [ 698.004834][T29508] bond2: (slave macvlan1): making interface the new active one [ 698.015472][T29508] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 698.166611][T29503] syzkaller0: entered promiscuous mode [ 698.172282][T29503] syzkaller0: entered allmulticast mode [ 698.769660][T29541] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9472'. [ 699.786888][T29524] tipc: Enabled bearer , priority 0 [ 699.795164][T29528] syzkaller0: entered promiscuous mode [ 699.801231][T29528] syzkaller0: entered allmulticast mode [ 699.809014][T29530] syzkaller0: entered promiscuous mode [ 699.814617][T29530] syzkaller0: entered allmulticast mode [ 699.831503][T29537] tipc: Resetting bearer [ 699.922225][T29520] tipc: Resetting bearer [ 699.946050][T29520] tipc: Disabling bearer [ 699.953203][T29547] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9474'. [ 700.014364][T29545] wg1 speed is unknown, defaulting to 1000 [ 700.025772][T29547] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9474'. [ 700.194195][T29554] dvmrp1: entered allmulticast mode [ 700.227160][T29554] wg1 speed is unknown, defaulting to 1000 [ 700.295996][T29557] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9477'. [ 700.482930][T29560] tipc: Started in network mode [ 700.488892][T29560] tipc: Node identity 0a85089c1f7f, cluster identity 4711 [ 700.502357][T29560] tipc: Enabled bearer , priority 0 [ 700.531380][T29567] syzkaller0: entered promiscuous mode [ 700.572529][T29567] syzkaller0: entered allmulticast mode [ 700.620042][T29566] tipc: Enabled bearer , priority 0 [ 700.647794][T29566] syzkaller0: entered promiscuous mode [ 700.664429][T29566] syzkaller0: entered allmulticast mode [ 700.694764][T29560] tipc: Resetting bearer [ 700.717957][T29566] tipc: Resetting bearer [ 700.743703][T29559] tipc: Resetting bearer [ 700.765608][T29559] tipc: Disabling bearer [ 700.779206][T29565] tipc: Resetting bearer [ 700.808993][T29565] tipc: Disabling bearer [ 700.822741][T29575] ªªªªªª: renamed from wg2 [ 701.008872][T29579] netlink: 'syz.5.9485': attribute type 1 has an invalid length. [ 701.121491][T29584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9485'. [ 701.285855][T29579] bond9: entered promiscuous mode [ 701.296576][T29579] 8021q: adding VLAN 0 to HW filter on device bond9 [ 701.313934][T29584] bond9: entered allmulticast mode [ 701.377696][T29592] bond9: (slave bridge6): making interface the new active one [ 701.412337][T29592] bridge6: entered promiscuous mode [ 701.432325][T29592] bridge6: entered allmulticast mode [ 701.453068][T29592] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 701.698558][T29601] tipc: Enabled bearer , priority 0 [ 701.707008][T29601] syzkaller0: entered promiscuous mode [ 701.717810][T29601] syzkaller0: entered allmulticast mode [ 701.780284][T29604] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 701.784835][T29601] tipc: Resetting bearer [ 701.821967][T29600] tipc: Resetting bearer [ 701.871663][T29600] tipc: Disabling bearer [ 702.254727][T29621] syzkaller0: entered promiscuous mode [ 702.262069][T29621] syzkaller0: entered allmulticast mode [ 702.352307][T29623] syzkaller0: entered promiscuous mode [ 702.380475][T29623] syzkaller0: entered allmulticast mode [ 702.460504][T29628] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9496'. [ 702.565429][T29630] tipc: Enabled bearer , priority 0 [ 702.576058][T29630] syzkaller0: entered promiscuous mode [ 702.583640][T29630] syzkaller0: entered allmulticast mode [ 702.677482][T29632] tipc: Resetting bearer [ 702.701403][T29629] tipc: Resetting bearer [ 702.748577][T29629] tipc: Disabling bearer [ 702.897965][T29638] wg1 speed is unknown, defaulting to 1000 [ 703.008109][T29647] syzkaller0: entered promiscuous mode [ 703.013671][T29647] syzkaller0: entered allmulticast mode [ 703.205853][T29655] syzkaller0: entered promiscuous mode [ 703.211643][T29655] syzkaller0: entered allmulticast mode [ 704.164136][T29674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9506'. [ 704.218432][T29671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9506'. [ 704.809094][T29663] syzkaller0: entered promiscuous mode [ 704.814599][T29663] syzkaller0: entered allmulticast mode [ 704.925954][T29677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9507'. [ 705.052296][T29685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9508'. [ 705.225316][T29694] syzkaller1: entered promiscuous mode [ 705.231407][T29694] syzkaller1: entered allmulticast mode [ 705.250094][T29696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9514'. [ 705.267839][T29694] netlink: 'syz.7.9513': attribute type 2 has an invalid length. [ 705.625164][T29703] syzkaller0: entered promiscuous mode [ 705.630822][T29703] syzkaller0: entered allmulticast mode [ 706.212796][T29721] wg1 speed is unknown, defaulting to 1000 [ 706.554120][T29732] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9524'. [ 706.732320][T29737] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9525'. [ 706.970492][T29751] syzkaller0: entered promiscuous mode [ 706.983232][T29751] syzkaller0: entered allmulticast mode [ 707.410966][T29756] tipc: Enabled bearer , priority 0 [ 707.430502][T29756] syzkaller0: entered promiscuous mode [ 707.436251][T29756] syzkaller0: entered allmulticast mode [ 707.485424][T29756] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9530'. [ 707.578461][T29756] tipc: Resetting bearer [ 707.590913][T29755] tipc: Resetting bearer [ 707.634182][T29755] tipc: Disabling bearer [ 707.646824][T29762] tipc: Enabled bearer , priority 0 [ 707.851042][T29764] syzkaller0: entered promiscuous mode [ 707.864683][T29770] netlink: 'syz.5.9534': attribute type 13 has an invalid length. [ 707.864714][T29764] syzkaller0: entered allmulticast mode [ 707.883053][T29770] netlink: 'syz.5.9534': attribute type 17 has an invalid length. [ 709.745074][T29770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.755668][T29770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 709.777749][T29762] tipc: Resetting bearer [ 709.791540][T29772] kthread_run failed with err -4 [ 709.798713][T29773] syzkaller0: entered promiscuous mode [ 709.804573][T29773] syzkaller0: entered allmulticast mode [ 709.857230][T29761] tipc: Resetting bearer [ 709.899293][T29761] tipc: Disabling bearer [ 709.961019][T29783] tipc: Enabled bearer , priority 0 [ 709.969851][T29783] syzkaller0: entered promiscuous mode [ 709.975462][T29783] syzkaller0: entered allmulticast mode [ 710.058493][T29783] tipc: Resetting bearer [ 710.073090][T29784] wg1 speed is unknown, defaulting to 1000 [ 710.095029][T29781] tipc: Resetting bearer [ 710.132750][T29781] tipc: Disabling bearer [ 710.173503][T29794] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 710.173513][T29793] tipc: Enabled bearer , priority 0 [ 710.174234][T29793] syzkaller0: entered promiscuous mode [ 710.182433][T29794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.188399][T29793] syzkaller0: entered allmulticast mode [ 710.283173][T29793] tipc: Resetting bearer [ 710.298368][T29791] tipc: Resetting bearer [ 710.342093][T29791] tipc: Disabling bearer [ 710.429763][T29805] netlink: 'syz.2.9542': attribute type 39 has an invalid length. [ 710.471780][T29807] batadv_slave_1: entered promiscuous mode [ 710.485933][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9544'. [ 710.491726][T29810] tipc: Enabled bearer , priority 0 [ 710.521642][T29807] batadv_slave_1 (unregistering): left promiscuous mode [ 710.528820][T29807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.573506][T29810] syzkaller0: entered promiscuous mode [ 710.579686][T29810] syzkaller0: entered allmulticast mode [ 710.618065][T29810] tipc: Resetting bearer [ 710.630364][T29809] tipc: Resetting bearer [ 710.676193][T29809] tipc: Disabling bearer [ 710.961990][T29820] wg1 speed is unknown, defaulting to 1000 [ 710.995069][T29826] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9549'. [ 711.263699][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.288677][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.595475][T29845] tipc: Enabled bearer , priority 0 [ 711.620049][T29845] syzkaller0: entered promiscuous mode [ 711.635825][T29845] syzkaller0: entered allmulticast mode [ 711.681179][T29845] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 711.714038][T29845] tipc: Resetting bearer [ 711.736523][T29844] tipc: Resetting bearer [ 711.813991][T29844] tipc: Disabling bearer [ 711.845902][T29853] tipc: Enabled bearer , priority 0 [ 711.854733][T29853] syzkaller0: entered promiscuous mode [ 711.860808][T29853] syzkaller0: entered allmulticast mode [ 711.878751][T29851] ip6gretap0: entered promiscuous mode [ 711.884434][T29851] macsec1: entered promiscuous mode [ 711.893721][T29851] ip6gretap0: left promiscuous mode [ 711.942539][T29853] tipc: Resetting bearer [ 711.952366][T29852] tipc: Resetting bearer [ 711.971257][T29852] tipc: Disabling bearer [ 712.000361][T29855] tipc: Enabled bearer , priority 0 [ 712.009358][T29855] syzkaller0: entered promiscuous mode [ 712.014951][T29855] syzkaller0: entered allmulticast mode [ 712.042563][T29855] tipc: Resetting bearer [ 712.057699][T29854] tipc: Resetting bearer [ 712.118087][T29854] tipc: Disabling bearer [ 712.147791][T29860] tipc: Enabled bearer , priority 0 [ 712.168291][T29860] syzkaller0: entered promiscuous mode [ 712.173884][T29860] syzkaller0: entered allmulticast mode [ 712.207221][T29860] tipc: Resetting bearer [ 712.217710][T29857] tipc: Resetting bearer [ 712.234743][T29857] tipc: Disabling bearer [ 712.294264][T29862] tipc: Enabled bearer , priority 0 [ 712.311302][T29862] syzkaller0: entered promiscuous mode [ 712.336529][T29862] syzkaller0: entered allmulticast mode [ 712.378960][T29862] tipc: Resetting bearer [ 712.403508][T29861] tipc: Resetting bearer [ 712.449470][T29861] tipc: Disabling bearer [ 712.471257][T29869] tipc: Enabled bearer , priority 0 [ 712.488004][T29866] syzkaller0: entered promiscuous mode [ 712.496699][T29866] syzkaller0: entered allmulticast mode [ 712.532052][T29866] netlink: 2 bytes leftover after parsing attributes in process `syz.7.9563'. [ 712.558240][T29866] tipc: Resetting bearer [ 712.565558][T29871] wg1 speed is unknown, defaulting to 1000 [ 712.573726][T29865] tipc: Resetting bearer [ 712.596672][T29865] tipc: Disabling bearer [ 712.607771][T29873] tipc: Enabled bearer , priority 0 [ 712.625773][T29878] syzkaller0: entered promiscuous mode [ 712.631549][T29878] syzkaller0: entered allmulticast mode [ 712.666788][T29876] tipc: Enabled bearer , priority 0 [ 712.695999][T29876] syzkaller0: entered promiscuous mode [ 712.701741][T29876] syzkaller0: entered allmulticast mode [ 712.712025][T29874] wg1 speed is unknown, defaulting to 1000 [ 712.733747][T29873] tipc: Resetting bearer [ 712.766421][T29872] tipc: Resetting bearer [ 712.783842][T29872] tipc: Disabling bearer [ 712.799898][T29876] tipc: Resetting bearer [ 712.820623][T29875] tipc: Resetting bearer [ 712.836652][T29875] tipc: Disabling bearer [ 712.845365][T29880] tipc: Enabled bearer , priority 0 [ 712.860127][T29880] syzkaller0: entered promiscuous mode [ 712.866083][T29880] syzkaller0: entered allmulticast mode [ 712.934296][T29880] tipc: Resetting bearer [ 712.950780][T29879] tipc: Resetting bearer [ 713.034455][T29879] tipc: Disabling bearer [ 713.327612][T29902] netlink: 'syz.3.9575': attribute type 1 has an invalid length. [ 713.420833][T29908] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 713.432748][T29908] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 713.440279][ T5845] Bluetooth: hci6: command 0x0405 tx timeout [ 713.481062][T29902] bond9: (slave bridge14): Enslaving as an active interface with a down link [ 713.504331][T29902] gretap1: entered promiscuous mode [ 713.510140][T29902] gretap1: entered allmulticast mode [ 713.550753][T29902] bond9: (slave gretap1): making interface the new active one [ 713.877026][T29902] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 714.184262][T29916] tipc: Enabled bearer , priority 0 [ 714.200408][T29916] syzkaller0: entered promiscuous mode [ 714.216741][T29916] syzkaller0: entered allmulticast mode [ 714.226983][T29917] tipc: Enabled bearer , priority 0 [ 714.338666][T29917] syzkaller0: entered promiscuous mode [ 714.344740][T29917] syzkaller0: entered allmulticast mode [ 714.382661][T29916] tipc: Resetting bearer [ 714.407823][T29917] tipc: Resetting bearer [ 714.414904][T29915] tipc: Resetting bearer [ 714.466712][T29915] tipc: Disabling bearer [ 714.490081][T29914] tipc: Resetting bearer [ 714.522758][T29914] tipc: Disabling bearer [ 714.730889][T29935] tipc: Enabled bearer , priority 0 [ 714.759294][T29935] syzkaller0: entered promiscuous mode [ 714.765075][T29935] syzkaller0: entered allmulticast mode [ 714.842468][T29935] tipc: Resetting bearer [ 714.855434][T29934] tipc: Resetting bearer [ 714.874711][T29934] tipc: Disabling bearer [ 714.921927][T29941] tipc: Enabled bearer , priority 0 [ 714.931822][T29941] syzkaller0: entered promiscuous mode [ 714.937551][T29941] syzkaller0: entered allmulticast mode [ 714.990392][T29943] tipc: Enabled bearer , priority 0 [ 715.007419][T29941] tipc: Resetting bearer [ 715.022403][T29943] syzkaller0: entered promiscuous mode [ 715.031147][T29943] syzkaller0: entered allmulticast mode [ 715.043408][T29940] tipc: Resetting bearer [ 715.068567][T29940] tipc: Disabling bearer [ 715.095138][T29943] tipc: Resetting bearer [ 715.211186][T29946] syzkaller0: create flow: hash 2603688895 index 2 [ 715.219009][T29942] tipc: Resetting bearer [ 715.307412][T29942] tipc: Disabling bearer [ 715.489761][T29946] syzkaller0: delete flow: hash 2603688895 index 2 [ 715.532779][T29955] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.604766][T29959] tipc: Enabled bearer , priority 0 [ 716.295630][ T30] audit: type=1800 audit(1760588565.122:14): pid=29975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9595" name="memory.events" dev="tmpfs" ino=9779 res=0 errno=0 [ 717.537328][T29955] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.552047][T29968] syzkaller0: entered promiscuous mode [ 717.557721][T29968] syzkaller0: entered allmulticast mode [ 717.563785][T29963] syzkaller0: entered promiscuous mode [ 717.569520][T29963] syzkaller0: entered allmulticast mode [ 717.575883][T29952] tipc: Resetting bearer [ 717.607625][T29952] tipc: Disabling bearer [ 717.654115][T29955] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.703254][T29978] wg1 speed is unknown, defaulting to 1000 [ 717.788969][T29955] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.792081][T29991] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 717.961066][T29996] tipc: Enabled bearer , priority 0 [ 717.980476][T29996] syzkaller0: entered promiscuous mode [ 717.986412][T29996] syzkaller0: entered allmulticast mode [ 718.034774][T29998] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 718.044284][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.055983][T29998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.067590][T29996] tipc: Resetting bearer [ 718.088771][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.100418][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.110485][T29995] tipc: Resetting bearer [ 718.128376][T29995] tipc: Disabling bearer [ 718.166193][ T1164] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.199225][T30003] tipc: Enabled bearer , priority 0 [ 718.229912][T30003] syzkaller0: entered promiscuous mode [ 718.235511][T30003] syzkaller0: entered allmulticast mode [ 718.315885][T30005] wg1 speed is unknown, defaulting to 1000 [ 718.358727][T30003] tipc: Resetting bearer [ 718.386938][T30002] tipc: Resetting bearer [ 718.446742][T30002] tipc: Disabling bearer [ 718.580530][T30012] wg1 speed is unknown, defaulting to 1000 [ 718.817920][T30019] tipc: Enabled bearer , priority 0 [ 718.894256][T30019] syzkaller0: entered promiscuous mode [ 718.919020][T30019] syzkaller0: entered allmulticast mode [ 718.942745][T30029] Bluetooth: hci0: unsupported parameter 512 [ 718.949790][T30029] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 719.000304][T30019] tipc: Resetting bearer [ 719.045328][T30018] tipc: Resetting bearer [ 719.071217][T30018] tipc: Disabling bearer [ 719.093387][T30035] netlink: 'syz.2.9614': attribute type 12 has an invalid length. [ 719.102115][T30033] tipc: Enabled bearer , priority 0 [ 719.109874][T30036] tipc: Enabled bearer , priority 0 [ 719.127435][T30031] syzkaller0: entered promiscuous mode [ 719.149806][T30031] syzkaller0: entered allmulticast mode [ 719.168996][T30033] syzkaller0: entered promiscuous mode [ 719.174906][T30033] syzkaller0: entered allmulticast mode [ 719.208715][T30031] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 719.248988][T30033] tipc: Resetting bearer [ 719.282283][T30031] tipc: Resetting bearer [ 719.342649][T30032] tipc: Resetting bearer [ 719.369672][T30032] tipc: Disabling bearer [ 719.392796][T30038] tipc: Enabled bearer , priority 0 [ 719.400853][T30030] tipc: Resetting bearer [ 719.419567][T30030] tipc: Disabling bearer [ 719.429236][T30041] syzkaller0: entered promiscuous mode [ 719.434757][T30041] syzkaller0: entered allmulticast mode [ 719.479223][T30038] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 719.522157][T30038] tipc: Resetting bearer [ 719.538753][T30049] tipc: Enabled bearer , priority 0 [ 719.569912][T30049] syzkaller0: entered promiscuous mode [ 719.585439][T30049] syzkaller0: entered allmulticast mode [ 719.593580][T30037] tipc: Resetting bearer [ 719.649360][T30037] tipc: Disabling bearer [ 719.804970][T30049] tipc: Resetting bearer [ 719.831765][T30048] tipc: Resetting bearer [ 719.855200][T30048] tipc: Disabling bearer [ 719.873656][T30056] tipc: Enabled bearer , priority 0 [ 719.882411][T30061] syzkaller0: entered promiscuous mode [ 719.889571][T30061] syzkaller0: entered allmulticast mode [ 719.903240][T30057] wg1 speed is unknown, defaulting to 1000 [ 719.965890][T30056] tipc: Resetting bearer [ 719.986757][T30063] tipc: Enabled bearer , priority 0 [ 720.024763][T30054] tipc: Resetting bearer [ 720.043304][T30054] tipc: Disabling bearer [ 720.053618][T30063] syzkaller0: entered promiscuous mode [ 720.059581][T30063] syzkaller0: entered allmulticast mode [ 720.092745][T30067] tipc: Enabled bearer , priority 0 [ 720.109164][T30063] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9622'. [ 720.119732][T30067] syzkaller0: entered promiscuous mode [ 720.125325][T30067] syzkaller0: entered allmulticast mode [ 720.135270][T30065] tipc: Enabled bearer , priority 0 [ 720.153408][T30063] tipc: Resetting bearer [ 720.165130][T30069] syzkaller0: entered promiscuous mode [ 720.173235][T30069] syzkaller0: entered allmulticast mode [ 720.182415][T30062] tipc: Resetting bearer [ 720.199155][T30062] tipc: Disabling bearer [ 720.233054][T30067] tipc: Resetting bearer [ 720.249686][T30065] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 720.279272][T30066] tipc: Resetting bearer [ 720.325450][T30066] tipc: Disabling bearer [ 720.344493][T30065] tipc: Resetting bearer [ 720.390275][T30079] netlink: 'syz.3.9626': attribute type 13 has an invalid length. [ 720.408349][T30079] netlink: 'syz.3.9626': attribute type 17 has an invalid length. [ 720.445350][T30079] erspan0: left promiscuous mode [ 720.514676][T30079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 720.532710][T30064] tipc: Resetting bearer [ 720.551142][T30064] tipc: Disabling bearer [ 720.643031][T30083] tipc: Enabled bearer , priority 0 [ 720.655573][T30083] syzkaller0: entered promiscuous mode [ 720.663694][T30083] syzkaller0: entered allmulticast mode [ 720.688373][T30083] tipc: Resetting bearer [ 720.697587][T30082] tipc: Resetting bearer [ 720.713205][T30082] tipc: Disabling bearer [ 720.843868][T30087] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 720.981468][T30093] netlink: 830 bytes leftover after parsing attributes in process `syz.8.9633'. [ 721.062300][T30096] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9634'. [ 721.073528][T30096] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9634'. [ 721.073810][T30097] tipc: Enabled bearer , priority 0 [ 721.096991][T30096] bridge0: entered promiscuous mode [ 721.103452][T30096] ip6gretap0: entered promiscuous mode [ 721.114501][T30097] syzkaller0: entered promiscuous mode [ 721.120749][T30097] syzkaller0: entered allmulticast mode [ 721.147824][T30097] tipc: Resetting bearer [ 721.160357][T30095] tipc: Resetting bearer [ 721.216523][T30095] tipc: Disabling bearer [ 721.272332][T30099] tipc: Enabled bearer , priority 0 [ 721.281219][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 721.300987][T30099] syzkaller0: entered promiscuous mode [ 721.307028][T30099] syzkaller0: entered allmulticast mode [ 721.370985][T30101] wg1 speed is unknown, defaulting to 1000 [ 721.382780][T30099] tipc: Resetting bearer [ 721.395183][T30098] tipc: Resetting bearer [ 721.428884][T30098] tipc: Disabling bearer [ 721.768060][T30118] tipc: Enabled bearer , priority 0 [ 721.775860][T30118] syzkaller0: entered promiscuous mode [ 721.781432][T30118] syzkaller0: entered allmulticast mode [ 721.807474][T30118] tipc: Resetting bearer [ 721.816989][T30117] tipc: Resetting bearer [ 722.024543][T30117] tipc: Disabling bearer [ 722.256814][T30120] tipc: Enabled bearer , priority 0 [ 722.282961][T30120] syzkaller0: entered promiscuous mode [ 722.316614][T30120] syzkaller0: entered allmulticast mode [ 722.452430][T30123] tipc: Resetting bearer [ 722.462318][T30119] tipc: Resetting bearer [ 722.507106][T30119] tipc: Disabling bearer [ 722.670104][T30128] netlink: 'syz.5.9644': attribute type 1 has an invalid length. [ 722.681189][T30126] tipc: Enabled bearer , priority 0 [ 722.697473][T30126] syzkaller0: entered promiscuous mode [ 722.706436][T30126] syzkaller0: entered allmulticast mode [ 722.741918][T30131] netlink: 580 bytes leftover after parsing attributes in process `syz.3.9646'. [ 722.777813][T30133] netlink: 2 bytes leftover after parsing attributes in process `syz.8.9645'. [ 722.778632][T30131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9646'. [ 722.792092][T30133] tipc: Resetting bearer [ 722.809120][T30125] tipc: Resetting bearer [ 722.842585][T30125] tipc: Disabling bearer [ 722.853221][T30136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9647'. [ 722.870464][T30137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9646'. [ 722.884163][T30128] 8021q: adding VLAN 0 to HW filter on device bond10 [ 723.030246][T30132] bond10 (unregistering): Released all slaves [ 723.072552][T30144] tipc: Enabled bearer , priority 0 [ 723.082401][T30144] syzkaller0: entered promiscuous mode [ 723.088348][T30144] syzkaller0: entered allmulticast mode [ 723.103850][T30136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9647'. [ 723.161443][T30144] tipc: Resetting bearer [ 723.183277][T30143] tipc: Resetting bearer [ 723.200464][T30143] tipc: Disabling bearer [ 723.223225][T30146] tipc: Enabled bearer , priority 0 [ 723.234942][T30148] tipc: Enabled bearer , priority 0 [ 723.244657][T30148] syzkaller0: entered promiscuous mode [ 723.250370][T30148] syzkaller0: entered allmulticast mode [ 723.281615][T30148] tipc: Resetting bearer [ 723.292159][T30146] syzkaller0: entered promiscuous mode [ 723.297992][T30146] syzkaller0: entered allmulticast mode [ 723.306829][T30147] tipc: Resetting bearer [ 723.328363][T30147] tipc: Disabling bearer [ 723.379116][T30146] tipc: Resetting bearer [ 723.424787][T30145] tipc: Resetting bearer [ 723.490207][T30145] tipc: Disabling bearer [ 723.524765][T30156] tipc: Enabled bearer , priority 0 [ 723.588702][T30156] syzkaller0: entered promiscuous mode [ 723.616665][T30156] syzkaller0: entered allmulticast mode [ 723.853702][T30155] wg1 speed is unknown, defaulting to 1000 [ 723.877754][T30171] tipc: Resetting bearer [ 723.895307][T30173] dummy0: entered promiscuous mode [ 723.901683][T30173] vlan0: entered promiscuous mode [ 723.908923][T30173] bond0: entered promiscuous mode [ 723.914156][T30173] bond_slave_0: entered promiscuous mode [ 723.920864][T30173] bond_slave_1: entered promiscuous mode [ 723.927917][T30177] netlink: 'syz.7.9660': attribute type 1 has an invalid length. [ 723.951224][T30174] tipc: Enabled bearer , priority 0 [ 723.964313][T30175] syzkaller0: entered promiscuous mode [ 723.969966][T30175] syzkaller0: entered allmulticast mode [ 723.977282][T30153] tipc: Resetting bearer [ 723.993117][T30153] tipc: Disabling bearer [ 724.042795][T30167] tipc: Resetting bearer [ 724.064089][T30178] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 724.075861][T30178] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 724.132651][T30177] gretap1: entered promiscuous mode [ 724.184557][T30177] bond3: (slave gretap1): making interface the new active one [ 724.193333][T30177] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 724.202428][T30166] tipc: Resetting bearer [ 724.226963][T30166] tipc: Disabling bearer [ 724.247115][T30180] macvlan2: entered promiscuous mode [ 724.252627][T30180] macvlan2: entered allmulticast mode [ 724.259107][T30180] bond3: entered promiscuous mode [ 724.267046][T30180] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 724.285102][T30180] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 724.307873][T30180] bond3: left promiscuous mode [ 724.366431][T30189] tipc: Enabled bearer , priority 0 [ 724.387897][T30186] syzkaller0: entered promiscuous mode [ 724.402453][T30186] syzkaller0: entered allmulticast mode [ 724.448825][T30186] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 724.509936][T30186] tipc: Resetting bearer [ 724.529347][T30185] tipc: Resetting bearer [ 724.551240][T30185] tipc: Disabling bearer [ 724.591612][T30195] tipc: Enabled bearer , priority 0 [ 724.614304][T30195] syzkaller0: entered promiscuous mode [ 724.630547][T30195] syzkaller0: entered allmulticast mode [ 724.669269][T30195] tipc: Resetting bearer [ 724.703755][T30194] tipc: Resetting bearer [ 724.779486][T30194] tipc: Disabling bearer [ 724.810072][T30200] wg1 speed is unknown, defaulting to 1000 [ 724.873405][T30202] tipc: Enabled bearer , priority 0 [ 724.912661][T30202] syzkaller0: entered promiscuous mode [ 724.921962][T30202] syzkaller0: entered allmulticast mode [ 724.950856][T30211] ªªªªªª: renamed from wg2 (while UP) [ 724.956326][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 724.977124][T30202] tipc: Resetting bearer [ 724.988104][T30201] tipc: Resetting bearer [ 725.199648][T30201] tipc: Disabling bearer [ 725.361280][T30223] Bluetooth: hci0: unsupported parameter 512 [ 725.368399][T30223] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 725.737756][T30229] wg1 speed is unknown, defaulting to 1000 [ 725.884287][T30237] __nla_validate_parse: 3 callbacks suppressed [ 725.884304][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9676'. [ 726.006340][T30237] bridge_slave_1: left allmulticast mode [ 726.019461][T30237] bridge_slave_1: left promiscuous mode [ 726.025598][T30237] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.042742][T30237] bridge_slave_0: left allmulticast mode [ 726.056410][T30237] bridge_slave_0: left promiscuous mode [ 726.062402][T30237] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.248833][T30237] bond1: (slave vlan2): Releasing active interface [ 726.429338][T30238] tipc: Enabled bearer , priority 0 [ 726.437519][T30251] syzkaller0: entered promiscuous mode [ 726.468602][T30251] syzkaller0: entered allmulticast mode [ 726.553956][T30260] tipc: Resetting bearer [ 726.586718][T30236] tipc: Resetting bearer [ 726.618669][T30236] tipc: Disabling bearer [ 727.281537][T30269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.298895][T30269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.368388][T30269] veth1_vlan: left allmulticast mode [ 727.505855][T30252] syzkaller0: entered promiscuous mode [ 727.511973][T30252] syzkaller0: entered allmulticast mode [ 727.559805][ T9743] wg1 speed is unknown, defaulting to 1000 [ 727.559824][ T36] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.586085][ T36] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.610930][ T9743] syz0: Port: 1 Link DOWN [ 727.648770][ T36] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.657377][ T36] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.858028][T30287] tipc: Enabled bearer , priority 0 [ 727.896307][T30284] syzkaller0: entered promiscuous mode [ 727.901818][T30284] syzkaller0: entered allmulticast mode [ 728.050510][T30281] tipc: Resetting bearer [ 728.097670][T30289] netlink: 'syz.5.9688': attribute type 16 has an invalid length. [ 728.105978][T30289] netlink: 'syz.5.9688': attribute type 17 has an invalid length. [ 728.115251][T30281] tipc: Disabling bearer [ 728.175932][T30289] eql: remember to turn off Van-Jacobson compression on your slave devices [ 728.211394][T30289] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 728.233568][T30300] syzkaller0: entered promiscuous mode [ 728.244809][T30300] syzkaller0: entered allmulticast mode [ 728.685740][T30322] netlink: 'syz.8.9695': attribute type 11 has an invalid length. [ 728.833631][T30326] wg1 speed is unknown, defaulting to 1000 [ 728.917586][T30330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9698'. [ 729.129086][T30338] netlink: 'syz.8.9700': attribute type 1 has an invalid length. [ 729.137830][T30338] netlink: 'syz.8.9700': attribute type 2 has an invalid length. [ 729.465304][T30345] xt_policy: neither incoming nor outgoing policy selected [ 729.600126][T30347] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.778666][T30347] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.900554][T30347] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.017783][T30347] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.066894][T30354] tipc: Enabled bearer , priority 0 [ 730.075086][T30354] syzkaller0: entered promiscuous mode [ 730.081568][T30354] syzkaller0: entered allmulticast mode [ 730.124619][T30354] tipc: Resetting bearer [ 730.146706][T30353] tipc: Resetting bearer [ 730.167199][T30353] tipc: Disabling bearer [ 730.204119][ T3559] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.253086][ T3559] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.267406][ T3559] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.297571][ T3559] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.587458][T30369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9713'. [ 730.608264][T30369] vlan0: entered promiscuous mode [ 731.230550][T30382] tipc: Enabled bearer , priority 0 [ 731.239838][T30382] syzkaller0: entered promiscuous mode [ 731.245427][T30382] syzkaller0: entered allmulticast mode [ 731.274282][T30382] tipc: Resetting bearer [ 731.283291][T30381] tipc: Resetting bearer [ 731.310749][T30381] tipc: Disabling bearer [ 731.469484][T30385] tipc: Enabled bearer , priority 0 [ 731.480081][T30385] syzkaller0: entered promiscuous mode [ 731.490061][T30385] syzkaller0: entered allmulticast mode [ 731.528077][T30385] tipc: Resetting bearer [ 731.535556][T30386] wg1 speed is unknown, defaulting to 1000 [ 731.553990][T30383] tipc: Resetting bearer [ 731.596578][T30383] tipc: Disabling bearer [ 731.764020][T30399] macvlan2: entered promiscuous mode [ 731.773554][T30393] tipc: Enabled bearer , priority 0 [ 731.783652][T30393] syzkaller0: entered promiscuous mode [ 731.789511][T30393] syzkaller0: entered allmulticast mode [ 731.857220][T30393] tipc: Resetting bearer [ 731.911201][T30392] tipc: Resetting bearer [ 731.997461][T30392] tipc: Disabling bearer [ 732.208711][T30410] netlink: 9896 bytes leftover after parsing attributes in process `syz.3.9727'. [ 732.476347][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 733.104374][T30424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9731'. [ 733.266508][T30433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9733'. [ 733.481672][T30447] netlink: 'syz.8.9737': attribute type 13 has an invalid length. [ 733.501886][T30447] netlink: 'syz.8.9737': attribute type 17 has an invalid length. [ 733.693055][T30447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.860988][T30453] netlink: 'syz.5.9739': attribute type 10 has an invalid length. [ 733.899466][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9741'. [ 733.919466][T30453] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 733.931653][T30453] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 733.965490][T30464] wg1 speed is unknown, defaulting to 1000 [ 734.034609][T30467] tipc: Enabled bearer , priority 0 [ 734.127902][T30467] tipc: Resetting bearer [ 734.184354][T30465] tipc: Disabling bearer [ 734.333787][T30475] tipc: Enabled bearer , priority 0 [ 734.342485][T30475] syzkaller0: entered promiscuous mode [ 734.348158][T30475] syzkaller0: entered allmulticast mode [ 734.365773][T30475] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 734.444178][T30480] tipc: Resetting bearer [ 734.484722][T30474] tipc: Resetting bearer [ 734.563690][T30474] tipc: Disabling bearer [ 734.587576][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9748'. [ 734.632375][T30489] netlink: 'syz.8.9750': attribute type 1 has an invalid length. [ 734.645154][T30489] netlink: 'syz.8.9750': attribute type 1 has an invalid length. [ 734.653585][T30489] netlink: 224 bytes leftover after parsing attributes in process `syz.8.9750'. [ 735.196036][T30509] tipc: Enabled bearer , priority 0 [ 735.227285][T30511] tipc: Enabled bearer , priority 0 [ 735.237287][T30511] syzkaller0: entered promiscuous mode [ 735.242828][T30511] syzkaller0: entered allmulticast mode [ 735.251315][T30509] syzkaller0: entered promiscuous mode [ 735.263641][T30509] syzkaller0: entered allmulticast mode [ 735.315445][T30511] tipc: Resetting bearer [ 735.332574][T30507] tipc: Resetting bearer [ 735.362766][T30507] tipc: Disabling bearer [ 735.379219][T30509] tipc: Resetting bearer [ 735.397619][T30508] tipc: Resetting bearer [ 735.414467][T30508] tipc: Disabling bearer [ 735.440315][T30514] wg1 speed is unknown, defaulting to 1000 [ 735.719899][T30530] netlink: 'syz.3.9759': attribute type 10 has an invalid length. [ 735.732771][T30523] block nbd0: NBD_DISCONNECT [ 735.735591][T30525] wg1 speed is unknown, defaulting to 1000 [ 735.737903][T30523] block nbd0: Send disconnect failed -32 [ 735.737943][T30523] block nbd0: shutting down sockets [ 735.740152][T30530] netlink: 'syz.3.9759': attribute type 10 has an invalid length. [ 735.779782][T30523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9760'. [ 735.805695][T30523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9760'. [ 735.816400][T30523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9760'. [ 735.825319][T30523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9760'. [ 735.838431][T30526] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 735.960489][T30530] batadv0: entered promiscuous mode [ 735.969364][T30530] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 736.273566][T30542] tipc: Enabled bearer , priority 0 [ 736.282106][T30542] syzkaller0: entered promiscuous mode [ 736.292647][T30542] syzkaller0: entered allmulticast mode [ 736.317696][T30542] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 736.411587][T30541] tipc: Resetting bearer [ 736.527569][T30541] tipc: Disabling bearer [ 736.638318][T30552] syzkaller0: entered promiscuous mode [ 736.643927][T30552] syzkaller0: entered allmulticast mode [ 736.779799][T30556] wg1 speed is unknown, defaulting to 1000 [ 736.948698][T30564] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 737.408835][T30573] wg1 speed is unknown, defaulting to 1000 [ 737.665439][T30581] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.673447][T30581] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.896527][T30581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.942109][T30581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.303445][ T3559] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.313107][ T3559] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.338136][T30603] tipc: Enabled bearer , priority 0 [ 738.364427][T30604] syzkaller0: entered promiscuous mode [ 738.371664][T30604] syzkaller0: entered allmulticast mode [ 738.423850][ T3559] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.435494][ T3559] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.453626][T30602] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 738.496226][T30588] wg1 speed is unknown, defaulting to 1000 [ 738.503343][T30601] tipc: Resetting bearer [ 738.612712][T30608] tipc: Enabled bearer , priority 0 [ 738.654188][T30608] syzkaller0: entered promiscuous mode [ 738.664252][T30608] syzkaller0: entered allmulticast mode [ 738.682647][T30611] Bluetooth: hci0: unsupported parameter 65535 [ 738.700877][T30608] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 738.756897][T30611] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 738.890548][T30616] tipc: Enabled bearer , priority 0 [ 738.904180][T30608] tipc: Resetting bearer [ 738.912636][T30614] syzkaller0: entered promiscuous mode [ 738.920879][T30614] syzkaller0: entered allmulticast mode [ 738.953056][T30614] tipc: Resetting bearer [ 738.986575][T30613] tipc: Resetting bearer [ 739.038623][T30613] tipc: Disabling bearer [ 739.060729][T30607] tipc: Resetting bearer [ 739.112636][T30607] tipc: Disabling bearer [ 739.487271][T30624] __nla_validate_parse: 53 callbacks suppressed [ 739.487292][T30624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9789'. [ 739.576895][T30626] bond0: (slave dummy0): Releasing backup interface [ 739.584374][T30626] dummy0: left promiscuous mode [ 739.610173][T30626] bond0: (slave bond_slave_0): Releasing backup interface [ 739.619212][T30626] bond_slave_0: left promiscuous mode [ 739.658152][T30626] bond0: (slave bond_slave_1): Releasing backup interface [ 739.668504][T30626] bond_slave_1: left promiscuous mode [ 739.675191][T30626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.694850][T30626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 739.728067][T30623] tc_dump_action: action bad kind [ 739.754825][T30631] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 739.830399][T30630] tipc: Enabled bearer , priority 0 [ 739.844669][T30630] syzkaller0: entered promiscuous mode [ 739.850334][T30630] syzkaller0: entered allmulticast mode [ 739.904885][T30630] tipc: Resetting bearer [ 739.932420][T30629] tipc: Resetting bearer [ 739.999028][T30629] tipc: Disabling bearer [ 740.169070][T30639] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 740.183407][T30639] bond10: (slave macvlan0): making interface the new active one [ 740.208365][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9794'. [ 740.230001][T30639] bond10: (slave macvlan0): Enslaving as an active interface with an up link [ 740.571567][T30651] bridge2: entered allmulticast mode [ 740.600660][T30656] tipc: Enabled bearer , priority 0 [ 740.615926][T30656] syzkaller0: entered promiscuous mode [ 740.621748][T30656] syzkaller0: entered allmulticast mode [ 740.629541][T30651] bridge2: left allmulticast mode [ 740.635934][T30655] tipc: Enabled bearer , priority 0 [ 740.640585][T30652] sctp: [Deprecated]: syz.3.9798 (pid 30652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.640585][T30652] Use struct sctp_sack_info instead [ 740.663799][T30652] xt_addrtype: ipv6 does not support BROADCAST matching [ 740.665817][T30651] dvmrp1: entered allmulticast mode [ 740.676613][T30655] syzkaller0: entered promiscuous mode [ 740.682107][T30655] syzkaller0: entered allmulticast mode [ 740.733110][T30656] tipc: Resetting bearer [ 740.750456][T30654] tipc: Resetting bearer [ 740.777329][T30654] tipc: Disabling bearer [ 740.792974][T30655] tipc: Resetting bearer [ 740.824258][T30651] wg1 speed is unknown, defaulting to 1000 [ 740.837801][T30653] tipc: Resetting bearer [ 740.864778][T30653] tipc: Disabling bearer [ 740.896535][T30664] tipc: Enabled bearer , priority 0 [ 740.929525][T30666] syzkaller0: entered promiscuous mode [ 740.935030][T30666] syzkaller0: entered allmulticast mode [ 740.968145][T30668] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9802'. [ 741.021109][T30668] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9802'. [ 741.033638][T30664] tipc: Resetting bearer [ 741.050666][T30663] tipc: Resetting bearer [ 741.080399][T30663] tipc: Disabling bearer [ 741.091917][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9802'. [ 741.101137][ T12] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.110449][ T12] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.133925][ T12] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.150929][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9802'. [ 741.164221][ T12] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.190822][T30673] wg1 speed is unknown, defaulting to 1000 [ 741.315907][T30677] netlink: 'syz.3.9804': attribute type 13 has an invalid length. [ 741.353998][T30677] netlink: 'syz.3.9804': attribute type 17 has an invalid length. [ 741.483968][T30677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 741.540079][T30680] xfrm0: entered promiscuous mode [ 741.550033][T30680] xfrm0: entered allmulticast mode [ 742.333535][T30688] wg1 speed is unknown, defaulting to 1000 [ 742.562190][T30696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9810'. [ 742.801352][T30698] tipc: Enabled bearer , priority 0 [ 742.819310][T30698] syzkaller0: entered promiscuous mode [ 742.824802][T30698] syzkaller0: entered allmulticast mode [ 742.896908][T30697] tipc: Resetting bearer [ 742.934505][T30697] tipc: Disabling bearer [ 743.156863][T30706] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9814'. [ 743.468884][T30713] syzkaller0: entered promiscuous mode [ 743.486396][T30713] syzkaller0: entered allmulticast mode [ 743.885397][T30717] nbd: must specify a size in bytes for the device [ 743.926879][T30717] nbd: must specify a size in bytes for the device [ 744.055887][T30719] tipc: Enabled bearer , priority 0 [ 744.074681][T30719] syzkaller0: entered promiscuous mode [ 744.093397][T30719] syzkaller0: entered allmulticast mode [ 744.108942][T30722] tipc: Enabling of bearer rejected, already enabled [ 744.180538][T30719] tipc: Resetting bearer [ 744.226898][T30718] tipc: Resetting bearer [ 744.276905][T30718] tipc: Disabling bearer [ 744.310070][T30727] netlink: 'syz.8.9822': attribute type 10 has an invalid length. [ 744.383529][T30729] tipc: Enabling of bearer rejected, already enabled [ 744.607178][T30742] wg1 speed is unknown, defaulting to 1000 [ 744.958982][T30746] wg1 speed is unknown, defaulting to 1000 [ 745.215342][T30733] wg1 speed is unknown, defaulting to 1000 [ 745.265675][T30761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9832'. [ 745.274972][T30761] netlink: 'syz.3.9832': attribute type 12 has an invalid length. [ 745.308451][T30761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9832'. [ 745.335399][T30761] netlink: 'syz.3.9832': attribute type 12 has an invalid length. [ 745.349344][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9832'. [ 745.356210][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.391112][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9832'. [ 745.409542][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.420801][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.480551][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.495577][T30768] tipc: Enabled bearer , priority 0 [ 745.524943][T30769] gretap0: entered promiscuous mode [ 745.533565][T30769] vlan0: entered promiscuous mode [ 745.568662][T30765] syzkaller0: entered promiscuous mode [ 745.574435][T30765] syzkaller0: entered allmulticast mode [ 745.624444][T30765] tipc: Resetting bearer [ 745.646837][T30764] tipc: Resetting bearer [ 745.679104][T30764] tipc: Disabling bearer [ 745.690736][T30774] wg1 speed is unknown, defaulting to 1000 [ 746.135599][T30786] tipc: Enabled bearer , priority 0 [ 746.163257][T30783] syzkaller0: entered promiscuous mode [ 746.192945][T30783] syzkaller0: entered allmulticast mode [ 746.212355][T30782] tipc: Resetting bearer [ 746.254874][T30782] tipc: Disabling bearer [ 746.797159][T30806] xt_TCPMSS: Only works on TCP SYN packets [ 746.931811][T30814] wg1 speed is unknown, defaulting to 1000 [ 747.174691][T30821] wg1 speed is unknown, defaulting to 1000 [ 747.196567][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 747.389319][ T30] audit: type=1800 audit(1760588596.222:15): pid=30813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9844" name="cgroup.controllers" dev="tmpfs" ino=9986 res=0 errno=0 [ 747.411175][T30826] tipc: Enabled bearer , priority 0 [ 747.429881][T30825] tipc: Disabling bearer [ 747.604325][T30831] team0: No ports can be present during mode change [ 747.800733][T30833] tipc: Enabled bearer , priority 0 [ 747.809119][T30833] syzkaller0: entered promiscuous mode [ 747.814716][T30833] syzkaller0: entered allmulticast mode [ 748.005350][T30833] tipc: Resetting bearer [ 748.032426][T30846] netlink: 120 bytes leftover after parsing attributes in process `syz.5.9855'. [ 748.135669][T30832] tipc: Resetting bearer [ 748.216041][T30832] tipc: Disabling bearer [ 748.499777][T30854] ªªªªªªòÓ»ö濾1I: renamed from lo [ 748.539968][T30856] tipc: Enabled bearer , priority 0 [ 748.580618][T30856] syzkaller0: entered promiscuous mode [ 748.626402][T30856] syzkaller0: entered allmulticast mode [ 748.683956][T30863] netlink: 'syz.5.9859': attribute type 13 has an invalid length. [ 748.713292][T30856] tipc: Resetting bearer [ 748.723013][T30863] netlink: 'syz.5.9859': attribute type 17 has an invalid length. [ 748.747011][T30855] tipc: Resetting bearer [ 748.847005][T30855] tipc: Disabling bearer [ 748.954628][T30863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.290522][T30869] netlink: 'syz.3.9861': attribute type 17 has an invalid length. [ 749.327556][T30869] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9861'. [ 749.864922][T30880] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9865'. [ 750.245074][T30882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.306517][T30882] bond0: (slave rose0): Error: Slave does not support XDP [ 750.892384][T30894] tipc: Enabled bearer , priority 0 [ 750.928354][T30894] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 750.946957][T30899] bond0: (slave gretap0): Error -99 calling set_mac_address [ 750.955273][T30894] syzkaller0: entered promiscuous mode [ 750.962017][T30894] syzkaller0: entered allmulticast mode [ 751.039710][T30894] tipc: Resetting bearer [ 751.062820][T30893] tipc: Resetting bearer [ 751.186928][T30893] tipc: Disabling bearer [ 751.370953][T30908] tipc: Enabling of bearer rejected, already enabled [ 751.646410][T30916] netlink: 'syz.5.9875': attribute type 13 has an invalid length. [ 751.942560][T30921] wg1 speed is unknown, defaulting to 1000 [ 752.311457][T30931] tipc: Enabling of bearer rejected, already enabled [ 752.366774][T30931] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 752.376084][T30931] syzkaller0: Caught tx_queue_len zero misconfig [ 752.418628][T30932] wg1 speed is unknown, defaulting to 1000 [ 753.095711][T30953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9884'. [ 753.114548][T30952] batman_adv: batadv0: Adding interface: macvlan2 [ 753.131437][T30953] netlink: 35 bytes leftover after parsing attributes in process `syz.3.9884'. [ 753.145698][T30952] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.187936][T30953] netlink: 'syz.3.9884': attribute type 6 has an invalid length. [ 753.206746][T30953] netlink: 'syz.3.9884': attribute type 5 has an invalid length. [ 753.214505][T30953] netlink: 35 bytes leftover after parsing attributes in process `syz.3.9884'. [ 753.234103][T30952] batman_adv: batadv0: Interface activated: macvlan2 [ 753.262829][T30953] netlink: 'syz.3.9884': attribute type 4 has an invalid length. [ 753.338159][T30954] netlink: 'syz.3.9884': attribute type 4 has an invalid length. [ 753.457579][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9886'. [ 753.618129][T30959] netlink: 'syz.7.9886': attribute type 1 has an invalid length. [ 753.723268][T30967] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9887'. [ 753.756796][T30967] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9887'. [ 753.765956][T30967] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9887'. [ 753.797279][T30967] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9887'. [ 753.819323][T30970] tipc: Enabled bearer , priority 0 [ 753.873324][T30972] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 753.881133][T30972] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 753.893972][T30972] tipc: Resetting bearer [ 753.959643][T30970] tipc: Resetting bearer [ 754.043126][T30976] wg1 speed is unknown, defaulting to 1000 [ 754.195956][T30979] tipc: Enabling of bearer rejected, already enabled [ 754.269813][ T1164] tipc: Resetting bearer [ 754.332377][T30983] tipc: Enabling of bearer rejected, already enabled [ 754.689307][T30989] wg1 speed is unknown, defaulting to 1000 [ 754.695421][T30991] netlink: 'syz.8.9896': attribute type 12 has an invalid length. [ 754.826252][ T5840] tipc: Node number set to 2204570538 [ 754.972256][T30997] macvlan1: left allmulticast mode [ 755.003397][T30997] bridge1: left allmulticast mode [ 755.028737][T30997] gretap1: left promiscuous mode [ 755.043750][T30997] batman_adv: batadv0: Interface deactivated: macvlan2 [ 755.080749][T30997] tipc: Resetting bearer [ 755.137572][T30997] mac80211_hwsim hwsim26 syzkaller0: left promiscuous mode [ 755.155177][T30997] mac80211_hwsim hwsim26 syzkaller0: left allmulticast mode [ 755.260106][T31002] tipc: Enabled bearer , priority 0 [ 755.286822][T31002] syzkaller0: entered promiscuous mode [ 755.292332][T31002] syzkaller0: entered allmulticast mode [ 755.359836][T31001] tipc: Resetting bearer [ 755.417500][T31001] tipc: Disabling bearer [ 755.672995][T31013] tipc: Enabled bearer , priority 0 [ 755.715399][T31013] syzkaller0: entered promiscuous mode [ 755.723566][T31013] syzkaller0: entered allmulticast mode [ 755.914251][T31016] tipc: Resetting bearer [ 755.972157][T31018] vlan2: entered promiscuous mode [ 755.990924][T31018] dummy0: entered promiscuous mode [ 756.015285][T31012] tipc: Resetting bearer [ 756.067900][T31012] tipc: Disabling bearer [ 756.091619][T31015] wg1 speed is unknown, defaulting to 1000 [ 756.562928][T31043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9910'. [ 756.600226][T31043] team2: entered promiscuous mode [ 756.605557][T31043] team2: entered allmulticast mode [ 756.642362][T31043] 8021q: adding VLAN 0 to HW filter on device team2 [ 756.851313][T31052] tipc: Enabling of bearer rejected, already enabled [ 756.932679][T31055] tipc: Enabled bearer , priority 0 [ 756.977246][T31059] syzkaller0: entered promiscuous mode [ 756.987050][T31059] syzkaller0: entered allmulticast mode [ 757.031042][T31053] tipc: Resetting bearer [ 757.068714][T31053] tipc: Disabling bearer [ 757.110488][T31061] tipc: Enabled bearer , priority 0 [ 757.139668][T31061] syzkaller0: entered promiscuous mode [ 757.149345][T31061] syzkaller0: entered allmulticast mode [ 757.186015][T31063] bridge_slave_1: entered promiscuous mode [ 757.221621][T31061] tipc: Resetting bearer [ 757.241886][T31060] tipc: Resetting bearer [ 757.296088][T31060] tipc: Disabling bearer [ 757.343187][T31069] dummy0: entered promiscuous mode [ 757.349610][T31069] vlan0: entered promiscuous mode [ 757.420187][T31071] wg1 speed is unknown, defaulting to 1000 [ 757.431181][T31076] tipc: Enabled bearer , priority 0 [ 757.465536][T31076] syzkaller0: entered promiscuous mode [ 757.472415][T31076] syzkaller0: entered allmulticast mode [ 757.518122][T31076] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 757.545619][T31079] tipc: New replicast peer: 255.255.255.255 [ 757.558716][T31079] tipc: Enabled bearer , priority 10 [ 757.700213][T31076] tipc: Resetting bearer [ 757.888459][T31074] tipc: Resetting bearer [ 757.945209][T31074] tipc: Disabling bearer [ 758.045504][T31085] bond11: Removing last arp target with arp_interval on [ 758.190994][T31101] tipc: Enabling of bearer rejected, already enabled [ 758.201215][T31091] wg1 speed is unknown, defaulting to 1000 [ 758.333149][T31103] tipc: Enabled bearer , priority 0 [ 758.412194][T31109] syzkaller0: entered promiscuous mode [ 758.446384][T31109] syzkaller0: entered allmulticast mode [ 758.460403][T31103] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 758.548757][T31109] tipc: Resetting bearer [ 758.570389][T31102] tipc: Resetting bearer [ 758.617202][T31102] tipc: Disabling bearer [ 759.234246][T31122] tipc: Enabling of bearer rejected, already enabled [ 759.266982][T31122] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 759.280503][T31122] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 759.289022][T31122] tipc: Resetting bearer [ 759.415134][T31129] tipc: Enabled bearer , priority 0 [ 759.426751][T31129] syzkaller0: entered promiscuous mode [ 759.432246][T31129] syzkaller0: entered allmulticast mode [ 759.460985][T31129] tipc: Resetting bearer [ 759.476214][T31128] tipc: Resetting bearer [ 759.509029][T31132] Bluetooth: MGMT ver 1.23 [ 759.518481][T31128] tipc: Disabling bearer [ 759.550736][T31132] geneve2: entered promiscuous mode [ 759.580315][T31134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9938'. [ 759.595008][ T36] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.604154][ T36] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.613029][ T36] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.625678][ T36] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.738601][T31139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9939'. [ 759.867899][T31143] wg1 speed is unknown, defaulting to 1000 [ 760.076903][ T5845] Bluetooth: hci6: command 0x0405 tx timeout [ 760.810497][T31177] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 760.822328][T31168] wg1 speed is unknown, defaulting to 1000 [ 761.574950][T31184] bridge_slave_1: left promiscuous mode [ 761.629510][T31184] bond1: left allmulticast mode [ 761.695688][T31184] ip6gretap0: left allmulticast mode [ 761.705154][T31184] macsec3: left allmulticast mode [ 761.737149][T31184] bridge3: left allmulticast mode [ 762.007265][T31184] team1: left allmulticast mode [ 762.035826][T31184] gretap2: left allmulticast mode [ 762.100997][T31184] bond8: left allmulticast mode [ 762.136889][T31184] vlan0: left allmulticast mode [ 762.145287][T31184] geneve1: left allmulticast mode [ 762.162377][T31184] vxcan1: left allmulticast mode [ 762.175489][T31201] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9954'. [ 762.190824][T31184] bond10: left allmulticast mode [ 762.203600][T31184] bridge15: left allmulticast mode [ 762.267928][T31184] team2: left promiscuous mode [ 762.272820][T31184] team2: left allmulticast mode [ 762.282908][T10227] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.295598][T10227] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 762.336702][T10227] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.365422][T10227] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 762.386067][T31194] batman_adv: batadv0: Adding interface: dummy0 [ 762.392474][T31194] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.431296][T31194] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 762.460519][T10227] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.476258][T10227] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 762.495092][T10227] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.503658][T10227] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 762.725619][T31216] wg1 speed is unknown, defaulting to 1000 [ 762.813895][T31222] netlink: 'syz.2.9958': attribute type 16 has an invalid length. [ 762.822293][T31222] netlink: 'syz.2.9958': attribute type 17 has an invalid length. [ 762.977127][T31222] ip6gretap0: left promiscuous mode [ 762.990362][T31222] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.007007][T31222] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 763.107636][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 763.333451][T31229] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9959'. [ 763.343491][T31229] netlink: 35 bytes leftover after parsing attributes in process `syz.5.9959'. [ 763.362904][T31229] netlink: 'syz.5.9959': attribute type 6 has an invalid length. [ 763.371232][T31229] netlink: 35 bytes leftover after parsing attributes in process `syz.5.9959'. [ 763.487732][ T5927] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 763.816451][ T3559] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 764.075757][T31246] wg1 speed is unknown, defaulting to 1000 [ 764.417985][T31253] wg1 speed is unknown, defaulting to 1000 [ 764.574251][T31255] wg1 speed is unknown, defaulting to 1000 [ 764.938838][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 764.947669][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 764.974840][T31269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9970'. [ 764.984944][T31266] tipc: Enabled bearer , priority 0 [ 765.000603][T31266] syzkaller0: entered promiscuous mode [ 765.006350][T31266] syzkaller0: entered allmulticast mode [ 765.013546][T31269] tunl0: Caught tx_queue_len zero misconfig [ 765.050092][T31266] tipc: Resetting bearer [ 765.063276][T31265] tipc: Resetting bearer [ 765.082936][T31265] tipc: Disabling bearer [ 765.376435][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 765.500316][T31280] wg1 speed is unknown, defaulting to 1000 [ 766.065504][T31277] wg1 speed is unknown, defaulting to 1000 [ 766.113675][T31291] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 767.504592][T31311] tipc: Resetting bearer [ 767.796070][T31320] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9983'. [ 767.836487][T31320] hsr_slave_0: left promiscuous mode [ 767.851303][T31320] hsr_slave_1: left promiscuous mode [ 768.045247][T31329] wg1 speed is unknown, defaulting to 1000 [ 768.181805][T31334] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 768.678108][T31348] ip6gre0: Caught tx_queue_len zero misconfig [ 768.753796][T31350] lo: Caught tx_queue_len zero misconfig [ 768.797706][T31351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9993'. [ 768.828838][T31351] netlink: 'syz.7.9993': attribute type 13 has an invalid length. [ 768.893977][T31357] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9995'. [ 768.904247][T31357] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9995'. [ 769.172124][T31350] bond6: left promiscuous mode [ 769.190731][T31350] bond7: left promiscuous mode [ 769.231108][T31350] bond9: left promiscuous mode [ 769.245394][T31350] bridge6: left promiscuous mode [ 769.286876][T31367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9996'. [ 769.356926][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 769.462964][T31350] tipc: Resetting bearer [ 769.470981][T31350] syzkaller0: left promiscuous mode [ 769.594084][T31366] netlink: 'syz.8.9996': attribute type 4 has an invalid length. [ 769.634576][T31366] netlink: 'syz.8.9996': attribute type 4 has an invalid length. [ 769.652755][T31358] wg1 speed is unknown, defaulting to 1000 [ 769.778524][T31374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9997'. [ 770.004876][T31383] syzkaller0: entered promiscuous mode [ 770.025243][T31383] syzkaller0: entered allmulticast mode [ 770.473811][T31388] wg1 speed is unknown, defaulting to 1000 [ 770.689080][T31402] netlink: 56 bytes leftover after parsing attributes in process `syz.8.10003'. [ 770.757509][T31402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10003'. [ 770.830519][T31406] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10005'. [ 771.124541][T31411] tipc: Enabling of bearer rejected, already enabled [ 771.153746][T31411] syzkaller0: entered promiscuous mode [ 771.331708][T31424] netlink: 'syz.5.10010': attribute type 39 has an invalid length. [ 772.182955][T31427] tipc: Enabled bearer , priority 0 [ 772.232141][T31435] syzkaller0: entered promiscuous mode [ 772.238989][T31435] syzkaller0: entered allmulticast mode [ 772.259844][T31442] syzkaller0: entered promiscuous mode [ 772.265348][T31442] syzkaller0: entered allmulticast mode [ 772.382086][T31444] tipc: Resetting bearer [ 772.431228][T31444] tipc: Disabling bearer [ 772.443189][T31459] syzkaller0: entered promiscuous mode [ 772.450314][T31459] syzkaller0: entered allmulticast mode [ 772.501961][T31456] tipc: Enabled bearer , priority 0 [ 772.541724][T31456] tipc: Resetting bearer [ 772.559969][T31464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10015'. [ 772.576515][T31455] tipc: Resetting bearer [ 772.604809][T31455] tipc: Disabling bearer [ 772.623328][T31466] tipc: Enabled bearer , priority 0 [ 772.632030][T31466] syzkaller0: entered promiscuous mode [ 772.638386][T31466] syzkaller0: entered allmulticast mode [ 772.679569][T31466] tipc: Resetting bearer [ 772.691013][T31465] tipc: Resetting bearer [ 772.724344][T31465] tipc: Disabling bearer [ 772.742213][T31470] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 772.765210][T31473] tipc: Enabled bearer , priority 0 [ 772.775398][T31473] syzkaller0: entered promiscuous mode [ 772.781656][T31473] syzkaller0: entered allmulticast mode [ 772.913446][T31473] tipc: Resetting bearer [ 772.937007][T31472] tipc: Resetting bearer [ 772.955692][T31472] tipc: Disabling bearer [ 772.990562][T31481] tipc: Enabling of bearer rejected, failed to enable media [ 773.042699][T31480] wg1 speed is unknown, defaulting to 1000 [ 773.583782][T31498] tipc: Enabled bearer , priority 0 [ 773.596880][T31499] syzkaller0: entered promiscuous mode [ 773.602393][T31499] syzkaller0: entered allmulticast mode [ 773.619653][T31496] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 773.727614][T31503] tipc: Enabling of bearer rejected, already enabled [ 773.739123][T31496] tipc: Resetting bearer [ 773.812907][T31495] tipc: Resetting bearer [ 773.847303][T31495] tipc: Disabling bearer [ 773.864384][T31505] netlink: 'syz.3.10025': attribute type 10 has an invalid length. [ 774.058774][T31513] dvmrp0: entered allmulticast mode [ 774.218702][T31515] syzkaller0: entered promiscuous mode [ 774.232030][T31515] syzkaller0: entered allmulticast mode [ 774.621942][T31530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10033'. [ 775.356401][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 776.774996][T31526] geneve3: entered promiscuous mode [ 776.855511][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.872705][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.889407][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.899022][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.919105][T31542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10036'. [ 777.046875][T31547] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10040'. [ 777.068694][T31547] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10040'. [ 777.070273][T31549] bond0: (slave rose0): Error: Slave does not support XDP [ 777.287021][T31556] team0 (unregistering): Failed to send options change via netlink (err -105) [ 777.307126][T31556] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 777.339619][T31556] team0 (unregistering): Port device team_slave_1 removed [ 777.349703][T31556] team0 (unregistering): Failed to send options change via netlink (err -105) [ 777.359778][T31556] team0 (unregistering): Failed to send port change of device bridge3 via netlink (err -105) [ 777.371886][T31556] team0 (unregistering): Port device bridge3 removed [ 777.438447][T31559] tipc: Enabled bearer , priority 0 [ 777.537242][T31559] syzkaller0: entered promiscuous mode [ 777.542836][T31559] syzkaller0: entered allmulticast mode [ 778.557936][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 778.558225][ T43] tipc: Node number set to 368707740 [ 779.263985][T31559] tipc: Resetting bearer [ 779.270146][T31566] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 779.293047][T31573] !: renamed from dummy0 [ 779.364320][T31583] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 779.376026][T31583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10047'. [ 779.417124][T31558] tipc: Resetting bearer [ 779.435867][T31558] tipc: Disabling bearer [ 779.465584][T31587] tipc: New replicast peer: 255.255.255.255 [ 779.475850][T31587] tipc: Enabled bearer , priority 10 [ 779.488221][T31581] wg1 speed is unknown, defaulting to 1000 [ 779.513335][T31585] wg1 speed is unknown, defaulting to 1000 [ 779.976987][T31601] wg1 speed is unknown, defaulting to 1000 [ 780.554710][T31623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10056'. [ 781.164449][T31639] wg1 speed is unknown, defaulting to 1000 [ 781.297070][T31643] tipc: Enabling of bearer rejected, already enabled [ 781.585281][T31650] netlink: 'syz.3.10064': attribute type 10 has an invalid length. [ 781.608965][T31652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10065'. [ 781.896385][T31657] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10067'. [ 781.915862][T31657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10067'. [ 781.948440][T31657] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10067'. [ 781.969158][T31657] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10067'. [ 782.015093][T31665] tipc: Enabling of bearer rejected, already enabled [ 782.032815][T31662] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 782.217716][T31671] team0: Caught tx_queue_len zero misconfig [ 782.239644][T31673] tipc: Enabling of bearer rejected, already enabled [ 782.272901][T31674] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10069'. [ 782.391440][T31678] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 782.679057][T31688] tipc: Enabled bearer , priority 0 [ 782.693395][T31688] tipc: Resetting bearer [ 782.713105][T31687] tipc: Disabling bearer [ 783.164770][T31699] wg1 speed is unknown, defaulting to 1000 [ 783.179703][T31696] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.10076'. [ 783.532347][T31715] tipc: Enabling of bearer rejected, already enabled [ 783.609515][T31718] netlink: 'syz.5.10084': attribute type 10 has an invalid length. [ 784.142703][T31729] syzkaller1: entered promiscuous mode [ 784.157844][T31729] syzkaller1: entered allmulticast mode [ 784.177551][T31727] wg1 speed is unknown, defaulting to 1000 [ 784.277032][T31736] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10089'. [ 784.328618][T31726] wg1 speed is unknown, defaulting to 1000 [ 784.406274][T31732] netlink: 'syz.7.10088': attribute type 12 has an invalid length. [ 785.281606][T31758] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 785.389102][T31761] tipc: Enabled bearer , priority 0 [ 785.409665][T31761] syzkaller0: entered promiscuous mode [ 785.425375][T31761] syzkaller0: entered allmulticast mode [ 785.498523][T31760] tipc: Resetting bearer [ 785.508671][T31765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10098'. [ 785.534443][T31760] tipc: Disabling bearer [ 785.743709][T31771] tipc: Enabling of bearer rejected, already enabled [ 785.752331][T31774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10101'. [ 785.761659][T31771] mac80211_hwsim hwsim26 syzkaller0: Caught tx_queue_len zero misconfig [ 786.732059][T31793] tun1: tun_chr_ioctl cmd 2148045848 [ 786.740246][T31793] tun1: tun_chr_ioctl cmd 21731 [ 787.117160][T31802] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 787.192186][T31807] netlink: 'syz.7.10111': attribute type 1 has an invalid length. [ 787.318872][T31807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 787.334863][T31808] wg1 speed is unknown, defaulting to 1000 [ 787.346419][T31813] erspan0: entered allmulticast mode [ 787.377572][T31815] siw: device registration error -23 [ 787.396176][T31813] bond4: (slave erspan0): making interface the new active one [ 787.433031][T31813] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 787.521691][T31807] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 787.584081][T31817] tipc: Enabling of bearer rejected, already enabled [ 788.107469][T31837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.138918][T31841] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 788.178232][T31839] wg1 speed is unknown, defaulting to 1000 [ 788.302399][T31850] tipc: Enabled bearer , priority 0 [ 788.314318][T31850] syzkaller0: entered promiscuous mode [ 788.321005][T31850] syzkaller0: entered allmulticast mode [ 788.347044][T31850] tipc: Resetting bearer [ 788.367044][T31849] tipc: Resetting bearer [ 788.402590][T31849] tipc: Disabling bearer [ 788.598700][T31861] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10125'. [ 788.702972][T31861] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10125'. [ 789.443809][T31881] bridge2: entered allmulticast mode [ 789.455680][T31881] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10130'. [ 789.509582][T31881] wg1 speed is unknown, defaulting to 1000 [ 789.840983][T31886] tipc: Enabling of bearer rejected, already enabled [ 790.010085][T31892] 8021q: adding VLAN 0 to HW filter on device bond5 [ 790.087832][T31892] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 790.110650][T31892] bond5: (slave macvlan3): Enslaving as a backup interface with an up link [ 790.137859][T31880] bridge2: left allmulticast mode [ 790.154094][T31895] bond4: (slave erspan0): Releasing active interface [ 790.193122][T31895] bond0: (slave bond_slave_0): Releasing backup interface [ 790.217881][T10227] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 790.232615][T31895] bond_slave_0: left promiscuous mode [ 790.243734][T31895] bond0: (slave bond_slave_1): Releasing backup interface [ 790.274092][T31895] bond_slave_1: left promiscuous mode [ 790.304912][T31895] team0: Port device team_slave_0 removed [ 790.333400][T31895] team0: Port device team_slave_1 removed [ 790.339909][T10227] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 790.406838][T31895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.618480][T31895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.640065][T31895] bond2: (slave macvlan1): Releasing active interface [ 790.673319][T31895] bond3: (slave gretap1): Releasing active interface [ 790.699941][T31895] batman_adv: batadv0: Removing interface: macvlan2 [ 791.058785][T31895] bond5: (slave macvlan3): Removing an active aggregator [ 791.077433][T10227] bond5: Warning: Found an uninitialized port [ 791.130024][T31895] bond5: (slave macvlan3): Releasing backup interface [ 791.397051][T31917] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10138'. [ 791.426221][T31917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10138'. [ 791.435366][T31917] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10138'. [ 791.595487][T31921] wg1 speed is unknown, defaulting to 1000 [ 791.605739][T31917] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10138'. [ 791.637614][T31923] netlink: 'syz.3.10137': attribute type 1 has an invalid length. [ 791.705931][T31923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10137'. [ 792.593509][T31934] netlink: 'syz.3.10141': attribute type 1 has an invalid length. [ 792.631354][T31934] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10141'. [ 792.928810][T31954] syzkaller0: entered promiscuous mode [ 792.958594][T31954] syzkaller0: entered allmulticast mode [ 794.324567][T31986] netlink: 'syz.7.10154': attribute type 13 has an invalid length. [ 794.333617][T31986] netlink: 'syz.7.10154': attribute type 17 has an invalid length. [ 794.351013][T31989] netlink: 'syz.2.10152': attribute type 10 has an invalid length. [ 794.360243][T31986] netlink: 'syz.7.10154': attribute type 27 has an invalid length. [ 794.374153][T31989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10152'. [ 794.477610][T31986] wg1 speed is unknown, defaulting to 1000 [ 794.937204][T31982] wg1 speed is unknown, defaulting to 1000 [ 795.243864][T31998] wg1 speed is unknown, defaulting to 1000 [ 795.320325][T32000] syzkaller0: entered promiscuous mode [ 795.336622][T32000] syzkaller0: entered allmulticast mode [ 795.680164][T32011] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 796.043976][T32017] tipc: Started in network mode [ 796.053144][T32017] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 796.066225][T32017] tipc: Enabling of bearer rejected, failed to enable media [ 796.075419][T32021] wg1 speed is unknown, defaulting to 1000 [ 796.083959][T32022] syzkaller0: entered promiscuous mode [ 796.090038][T32022] syzkaller0: entered allmulticast mode [ 796.477118][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 796.822353][T32032] wg1 speed is unknown, defaulting to 1000 [ 796.960797][T32036] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 796.979626][T32036] bond10 (unregistering): Released all slaves [ 797.121989][T32040] tipc: Enabled bearer , priority 0 [ 797.154627][T32040] syzkaller0: entered promiscuous mode [ 797.160830][T32040] syzkaller0: entered allmulticast mode [ 797.222597][T32040] tipc: Resetting bearer [ 797.234648][T32039] tipc: Resetting bearer [ 797.256182][T32039] tipc: Disabling bearer [ 797.345838][T32049] IPVS: set_ctl: invalid protocol: 43 172.30.0.6:20002 [ 797.398602][T32052] syzkaller0: entered promiscuous mode [ 797.404250][T32052] syzkaller0: entered allmulticast mode [ 797.681623][T32060] wg1: entered promiscuous mode [ 797.689462][T32060] wg1: entered allmulticast mode [ 797.714137][T32062] syzkaller0: entered promiscuous mode [ 797.720552][T32062] syzkaller0: entered allmulticast mode [ 797.730055][T32064] tipc: Enabled bearer , priority 0 [ 797.747049][T32064] syzkaller0: entered promiscuous mode [ 797.752917][T32064] syzkaller0: entered allmulticast mode [ 797.792711][T32063] tipc: Resetting bearer [ 797.819774][T32063] tipc: Disabling bearer [ 798.508668][T32075] wg1 speed is unknown, defaulting to 1000 [ 798.675563][T32079] geneve2: entered promiscuous mode [ 798.701290][ T1164] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.714658][ T1164] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.733253][ T1164] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.771247][T32081] tipc: Enabling of bearer rejected, already enabled [ 798.780041][T32079] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10178'. [ 798.805438][ T1164] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.447832][T32098] netlink: 'syz.2.10184': attribute type 39 has an invalid length. [ 799.533435][T32099] wg1 speed is unknown, defaulting to 1000 [ 799.596042][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10185'. [ 799.653821][T32102] wg1 speed is unknown, defaulting to 1000 [ 799.683111][T32107] tipc: Enabled bearer , priority 0 [ 799.701259][T32107] syzkaller0: entered promiscuous mode [ 799.708407][T32107] syzkaller0: entered allmulticast mode [ 799.878228][T32106] tipc: Resetting bearer [ 799.962994][T32106] tipc: Disabling bearer [ 800.028259][T32120] tipc: Enabled bearer , priority 0 [ 800.051859][T32120] tipc: Resetting bearer [ 800.081823][T32119] tipc: Disabling bearer [ 800.223454][T32126] syzkaller0: entered promiscuous mode [ 800.251801][T32126] syzkaller0: entered allmulticast mode [ 800.485158][T32129] wg1 speed is unknown, defaulting to 1000 [ 800.542725][T32131] pim6reg1: entered promiscuous mode [ 800.548236][T32131] pim6reg1: entered allmulticast mode [ 800.777396][T32143] netlink: 'syz.2.10196': attribute type 1 has an invalid length. [ 800.785268][T32143] netlink: 'syz.2.10196': attribute type 1 has an invalid length. [ 800.794002][T32143] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10196'. [ 801.114546][T32150] dvmrp8: entered allmulticast mode [ 801.163538][T32155] netlink: 276 bytes leftover after parsing attributes in process `syz.3.10203'. [ 801.184932][T32150] wg1 speed is unknown, defaulting to 1000 [ 801.269333][T32157] wg1 speed is unknown, defaulting to 1000 [ 801.323410][T32161] tipc: Enabled bearer , priority 0 [ 801.340138][T32161] syzkaller0: entered promiscuous mode [ 801.345743][T32161] syzkaller0: entered allmulticast mode [ 801.397211][T32159] tipc: Resetting bearer [ 801.442406][T32159] tipc: Disabling bearer [ 801.455349][T32149] dvmrp8: left allmulticast mode [ 802.082583][T32185] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 802.930394][T32196] netlink: 'syz.2.10215': attribute type 1 has an invalid length. [ 802.957331][T32196] netlink: 'syz.2.10215': attribute type 1 has an invalid length. [ 802.965342][T32196] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10215'. [ 802.974543][T32199] tipc: Enabled bearer , priority 0 [ 802.975313][T32199] syzkaller0: entered promiscuous mode [ 802.987483][T32199] syzkaller0: entered allmulticast mode [ 803.015523][T32198] tipc: Resetting bearer [ 803.057999][T32198] tipc: Disabling bearer [ 804.156679][ T31] INFO: task syz.6.9222:28651 blocked for more than 143 seconds. [ 804.164452][ T31] Not tainted syzkaller #0 [ 804.169557][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.178257][ T31] task:syz.6.9222 state:D stack:26104 pid:28651 tgid:28648 ppid:19026 task_flags:0x400140 flags:0x00080002 [ 804.190257][ T31] Call Trace: [ 804.193545][ T31] [ 804.196547][ T31] __schedule+0x1798/0x4cc0 [ 804.201066][ T31] ? __lock_acquire+0xab9/0xd20 [ 804.205905][ T31] ? __lock_acquire+0xab9/0xd20 [ 804.210864][ T31] ? __pfx___schedule+0x10/0x10 [ 804.215764][ T31] ? schedule+0x91/0x360 [ 804.220605][ T31] schedule+0x165/0x360 [ 804.224786][ T31] schedule_preempt_disabled+0x13/0x30 [ 804.230591][ T31] __mutex_lock+0x7e6/0x1350 [ 804.235214][ T31] ? __mutex_lock+0x5bb/0x1350 [ 804.240047][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 804.246489][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 804.251536][ T31] ? stack_trace_save+0x9c/0xe0 [ 804.256610][ T31] ? stack_depot_save_flags+0x40/0x860 [ 804.262081][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 804.268069][ T31] ? __alloc_skb+0x142/0x2d0 [ 804.272644][ T31] ? netlink_dump+0x1b7/0xe90 [ 804.277430][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 804.282785][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 804.288683][ T31] ? genl_rcv_msg+0x5da/0x790 [ 804.293345][ T31] ? netlink_rcv_skb+0x208/0x470 [ 804.298295][ T31] ? genl_rcv+0x28/0x40 [ 804.302437][ T31] ? netlink_unicast+0x82f/0x9e0 [ 804.307405][ T31] ? netlink_sendmsg+0x805/0xb30 [ 804.312331][ T31] ? __sock_sendmsg+0x21c/0x270 [ 804.317240][ T31] ? ____sys_sendmsg+0x505/0x830 [ 804.322182][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 804.327036][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 804.332136][ T31] ? do_syscall_64+0xfa/0xfa0 [ 804.336834][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.342912][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 804.349509][ T31] ? rcu_is_watching+0x15/0xb0 [ 804.354292][ T31] ? trace_kmalloc+0x1f/0xd0 [ 804.359154][ T31] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 804.365856][ T31] ? __alloc_skb+0x142/0x2d0 [ 804.370484][ T31] ? __build_skb_around+0x262/0x3f0 [ 804.375675][ T31] genl_dumpit+0x10b/0x1b0 [ 804.380116][ T31] netlink_dump+0x6e1/0xe90 [ 804.384618][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 804.389762][ T31] ? genl_start+0x499/0x6c0 [ 804.394300][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 804.399520][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 804.405242][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 804.411513][ T31] ? genl_get_cmd+0x496/0x910 [ 804.416215][ T31] ? __pfx_genl_start+0x10/0x10 [ 804.421071][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 804.425995][ T31] ? __pfx_genl_done+0x10/0x10 [ 804.430777][ T31] ? stack_trace_save+0x9c/0xe0 [ 804.435619][ T31] genl_rcv_msg+0x5da/0x790 [ 804.440149][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.445162][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 804.451681][ T31] netlink_rcv_skb+0x208/0x470 [ 804.456476][ T31] ? __lock_acquire+0xab9/0xd20 [ 804.461331][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 804.466422][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 804.471733][ T31] ? down_read+0x1ad/0x2e0 [ 804.476783][ T31] genl_rcv+0x28/0x40 [ 804.480795][ T31] netlink_unicast+0x82f/0x9e0 [ 804.485587][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 804.490989][ T31] ? netlink_sendmsg+0x642/0xb30 [ 804.495962][ T31] ? skb_put+0x11b/0x210 [ 804.500562][ T31] netlink_sendmsg+0x805/0xb30 [ 804.505335][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.510967][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 804.515911][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 804.521669][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.527313][ T31] __sock_sendmsg+0x21c/0x270 [ 804.531998][ T31] ____sys_sendmsg+0x505/0x830 [ 804.537083][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 804.542372][ T31] ? import_iovec+0x74/0xa0 [ 804.547379][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 804.552052][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.557568][ T31] ? futex_wait+0x285/0x360 [ 804.562092][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 804.567393][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 804.572859][ T31] ? do_syscall_64+0xbe/0xfa0 [ 804.577971][ T31] do_syscall_64+0xfa/0xfa0 [ 804.582489][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 804.588319][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.594419][ T31] ? clear_bhb_loop+0x60/0xb0 [ 804.599301][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.605427][ T31] RIP: 0033:0x7f46e518eec9 [ 804.610142][ T31] RSP: 002b:00007f46e5f43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.618901][ T31] RAX: ffffffffffffffda RBX: 00007f46e53e5fa0 RCX: 00007f46e518eec9 [ 804.627163][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 804.635226][ T31] RBP: 00007f46e5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 804.643724][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.652075][ T31] R13: 00007f46e53e6038 R14: 00007f46e53e5fa0 R15: 00007ffda2ce6a78 [ 804.660418][ T31] [ 804.663469][ T31] [ 804.663469][ T31] Showing all locks held in the system: [ 804.671668][ T31] 1 lock held by khungtaskd/31: [ 804.676843][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 804.686989][ T31] 2 locks held by getty/5589: [ 804.691648][ T31] #0: ffff88802fd2f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 804.702018][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 804.712446][ T31] 2 locks held by syz.0.8436/26080: [ 804.718007][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 804.727006][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 804.737583][ T31] 3 locks held by syz.6.9222/28651: [ 804.742764][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 804.751233][ T31] #1: ffff88804cf7d6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 804.762181][ T31] #2: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 804.772976][ T31] 2 locks held by syz.5.10169/32048: [ 804.778617][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 804.787302][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 804.798040][ T31] [ 804.800372][ T31] ============================================= [ 804.800372][ T31] [ 804.809199][ T31] NMI backtrace for cpu 0 [ 804.809211][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 804.809223][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 804.809230][ T31] Call Trace: [ 804.809234][ T31] [ 804.809240][ T31] dump_stack_lvl+0x189/0x250 [ 804.809256][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.809267][ T31] ? __pfx__printk+0x10/0x10 [ 804.809284][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 804.809303][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 804.809320][ T31] ? __pfx__printk+0x10/0x10 [ 804.809338][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 804.809356][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 804.809374][ T31] watchdog+0xf60/0xfa0 [ 804.809387][ T31] ? watchdog+0x1e2/0xfa0 [ 804.809400][ T31] kthread+0x711/0x8a0 [ 804.809415][ T31] ? __pfx_watchdog+0x10/0x10 [ 804.809425][ T31] ? __pfx_kthread+0x10/0x10 [ 804.809440][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 804.809451][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 804.809462][ T31] ? __pfx_kthread+0x10/0x10 [ 804.809476][ T31] ret_from_fork+0x4bc/0x870 [ 804.809487][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 804.809501][ T31] ? __switch_to_asm+0x39/0x70 [ 804.809512][ T31] ? __switch_to_asm+0x33/0x70 [ 804.809523][ T31] ? __pfx_kthread+0x10/0x10 [ 804.809537][ T31] ret_from_fork_asm+0x1a/0x30 [ 804.809557][ T31] [ 804.809561][ T31] Sending NMI from CPU 0 to CPUs 1: [ 804.958673][ C1] NMI backtrace for cpu 1 [ 804.958690][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 804.958709][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 804.958720][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 804.958746][ C1] Code: c3 e6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f0 1c 00 f3 0f 1e fa fb f4 98 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 804.958760][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 804.958776][ C1] RAX: 8ba5b8ba0c2ab800 RBX: ffffffff81960c17 RCX: 8ba5b8ba0c2ab800 [ 804.958790][ C1] RDX: 0000000000000001 RSI: ffffffff8d7e87df RDI: ffffffff8bc074e0 [ 804.958801][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 804.958814][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e0f70 [ 804.958826][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100385bb58 [ 804.958837][ C1] FS: 0000000000000000(0000) GS:ffff888125e12000(0000) knlGS:0000000000000000 [ 804.958851][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.958862][ C1] CR2: 00007ff1096a1c2e CR3: 0000000072ad4000 CR4: 00000000003526f0 [ 804.958877][ C1] Call Trace: [ 804.958884][ C1] [ 804.958890][ C1] default_idle+0x13/0x20 [ 804.958916][ C1] default_idle_call+0x73/0xb0 [ 804.958940][ C1] do_idle+0x1e7/0x510 [ 804.958961][ C1] ? __pfx_do_idle+0x10/0x10 [ 804.958986][ C1] cpu_startup_entry+0x44/0x60 [ 804.959004][ C1] start_secondary+0x101/0x110 [ 804.959038][ C1] common_startup_64+0x13e/0x147 [ 804.959071][ C1] [ 804.959772][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 805.125557][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 805.134668][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.145333][ T31] Call Trace: [ 805.148609][ T31] [ 805.151530][ T31] dump_stack_lvl+0x99/0x250 [ 805.156117][ T31] ? __asan_memcpy+0x40/0x70 [ 805.160703][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.165977][ T31] ? __pfx__printk+0x10/0x10 [ 805.170576][ T31] vpanic+0x237/0x6d0 [ 805.174905][ T31] ? __pfx_vpanic+0x10/0x10 [ 805.179405][ T31] ? preempt_schedule_common+0x83/0xd0 [ 805.185029][ T31] panic+0xb9/0xc0 [ 805.188941][ T31] ? __pfx_panic+0x10/0x10 [ 805.193365][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 805.198748][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 805.204910][ T31] watchdog+0xf9f/0xfa0 [ 805.209065][ T31] ? watchdog+0x1e2/0xfa0 [ 805.213395][ T31] kthread+0x711/0x8a0 [ 805.217572][ T31] ? __pfx_watchdog+0x10/0x10 [ 805.222251][ T31] ? __pfx_kthread+0x10/0x10 [ 805.227186][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.232378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.237567][ T31] ? __pfx_kthread+0x10/0x10 [ 805.242157][ T31] ret_from_fork+0x4bc/0x870 [ 805.246751][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 805.251873][ T31] ? __switch_to_asm+0x39/0x70 [ 805.256628][ T31] ? __switch_to_asm+0x33/0x70 [ 805.261732][ T31] ? __pfx_kthread+0x10/0x10 [ 805.266320][ T31] ret_from_fork_asm+0x1a/0x30 [ 805.271093][ T31] [ 805.274373][ T31] Kernel Offset: disabled [ 805.278720][ T31] Rebooting in 86400 seconds..