last executing test programs: 6.063167003s ago: executing program 4 (id=4378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002e000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.877848993s ago: executing program 4 (id=4380): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004400)=[{{&(0x7f0000001780), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115e000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x6a93, 0x3}, 0x21}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207baff8ff00000000bfa100000000000064010000f8ffffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="7fc125bd7000fddbdf251502000008000300d5d43a89c92afa0854b1d3c3c935e7180b6939341868ed158d7f321d91a1bea6246c170a88de9f564050f89980675784eb40cd3b9a9e05a011d34e459734a0e2f4deb18a297b07b94fdf2a0956bddf71dba029dbd6e5333f571212eddd02508fcd5708f111185ed9eb450553891107c4a36111de0f2b2f88e8cde3c34ae79ff2cd", @ANYRES32=0x0, @ANYBLOB="0c00990025250000770000000a00060008021100000100000a001a00ffffffffffff00000a001a00ffffffffffff0000"], 0x4c}}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0xa, 0x8, 0x2, 0x20000}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 4.993861157s ago: executing program 1 (id=4392): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0) (async) close(0xffffffffffffffff) (async) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, r3, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c001}, 0x8884) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x78, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) 4.957622736s ago: executing program 4 (id=4393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x6, 0x801, 0x187d) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x2, 0xf, 0x4}}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x615a}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000bda8822900000000b702000000000800000000000000000095000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x54) ioctl$sock_netdev_private(r5, 0x89fc, &(0x7f0000000080)="74972a7cdcf08d30fe259b7dfbe03273032af63d9f259d0beb4c1a04f7d7cf178920ef15913568190641a3f6900f233b2a3b33d1c6713597896b9cf6bfbc1834a4eb74ab8334f795d215b4bf78cb46cdc1d1bd75df7d2d7f3b21410a1b282d9a8ff162b4f8ffdc2ec36e2f9481c322e393") socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000080)=0x1) close(r9) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="02200000000000001c00128009000100626f6e64000000000c0002800800050001040000"], 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x66000080) sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 4.714198928s ago: executing program 3 (id=4397): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000009840)='police\x00', 0x7) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0)={{0x3, 0x1b80}, 0x6}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011a9112f1b78bdc92e8cf952a4300ee3a3de6a526f7fc583c86b1aef33335725089b9a50f7b1a93e79d8", 0x67}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) shutdown(r4, 0x1) r5 = socket(0x15, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r6, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r7, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x8c0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x40) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000000)={0x0, 'lo\x00', {}, 0x1f9}) 4.344999669s ago: executing program 3 (id=4398): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x13, 0x0, @val=@iter={0x0}}, 0x20) write$tcp_mem(r0, &(0x7f00000003c0)={0x0, 0x20, 0x80000001, 0x20, 0x8000000000006}, 0xfeb0) 4.230164844s ago: executing program 3 (id=4399): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095", @ANYBLOB="0fbec62acc5da0f868d2b9fc0ae9d7e53476f89c63", @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000100001002abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006272696467655f736c6176655f30000005001100010000001800168014"], 0x54}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000240), 0x4) (async, rerun: 64) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async, rerun: 64) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r7, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r8, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) setsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000000)="c089ffcc686d975b81", 0x9) 4.156220296s ago: executing program 3 (id=4400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007110bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r3, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f00000001c0)={@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x8}}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r7, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) r10 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$nci(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="410306"], 0xb) r11 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r11, 0x941c, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r5) socket$tipc(0x1e, 0x2, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.086091491s ago: executing program 1 (id=4401): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x0, 0x3, {{0x7, 0x4, 0x0, 0xb, 0x1c, 0x65, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@ra={0x94, 0x4}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xe0, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040}, 0x4) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000780)=0x3, 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000004f"], 0x4c}, 0x20009850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x8}, {}, 0x0, 0x0, 0x2, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @tfcpad={0x8, 0x16, 0x7ff}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 2.017487575s ago: executing program 4 (id=4409): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r1]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100001600000400048008000200ff000000"], 0x28}}, 0x0) ioctl(r3, 0x8b32, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) write$tcp_mem(r0, &(0x7f00000003c0)={0x0, 0x20, 0x80000001, 0x20, 0x8000000000006}, 0xfeb0) 1.932299918s ago: executing program 2 (id=4410): pselect6(0x40, &(0x7f0000000080)={0xd, 0xfffffffffffffc01, 0x1, 0x8, 0x2, 0xbdda, 0xfffffffffffffffe, 0x2}, &(0x7f0000000140)={0x3, 0x1, 0x9, 0x7fffffff, 0x3, 0x0, 0x892, 0x1}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x3, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) 1.77051071s ago: executing program 0 (id=4412): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket(0x28, 0x5, 0x0) socketpair(0x2c, 0x5, 0x2, &(0x7f0000000100)) (async) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x240240c1}, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r3 = socket$inet6(0xa, 0x3, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200", @ANYRES32, @ANYBLOB="0000000066e2279c54"], 0x50) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ac0), &(0x7f0000000e40)=0xc) recvmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000700)=""/231, 0xe7}, {&(0x7f0000000940)=""/219, 0xdb}, {&(0x7f0000000280)=""/50, 0x32}], 0x4}, 0xffffffff}, {{&(0x7f00000005c0)=@nfc_llcp, 0x80, 0x0}, 0xe}], 0x2, 0x200, 0x0) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) shutdown(r0, 0x1) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314770026bd7000fbdbdf2509000200f3797a3200000000080041007369770014003300776c616e31"], 0x38}, 0x1, 0x0, 0x0, 0x48049}, 0x800) 1.597714718s ago: executing program 0 (id=4413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x20, r1, 0x7, 0x70bd2a, 0x80000, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x313}, 0x14}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@local, 0x0, r6}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a0022}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004001) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1c0, 0x1, 0x1, 0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x30f5}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1.444788712s ago: executing program 2 (id=4414): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x8008743f, 0xf0ff1f00000002) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x82}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000e9619c929000000430000000400000000000000"], 0x18}, 0x24004800) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x1e, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r6, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x24}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="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"], 0x14a8}, 0x1, 0x0, 0x0, 0x24000845}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1100007f", @ANYRES16=r9, @ANYBLOB="01000000000000000000100000001800018014000200626f6e643000000000000000000000000800060008000000"], 0x34}}, 0x0) 982.006616ms ago: executing program 1 (id=4415): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r2, @ANYRES16=r1], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x8b, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0xe, 0x1, 0x0, 0xc, 0x7fffffff}}, {0x4}}]}]}, 0x58}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000780)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) splice(r8, 0x0, r6, 0x0, 0x9, 0x1200000000000000) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300090f0000000000000000000000010018009f03ff8005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000009000000000005000500000000000a00fffd000000000000000000000000095100"/120], 0x78}, 0x1, 0x7}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 980.973147ms ago: executing program 4 (id=4416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3c3, 0x31}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x24008040) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10000, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x24044804) 979.867847ms ago: executing program 0 (id=4417): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, 0x0, 0x6d5c, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x6, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x4c}}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) pipe(&(0x7f0000000080)) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') splice(r0, &(0x7f00000000c0)=0x3, r1, 0x0, 0x59, 0x8) (async) r2 = socket$inet(0x2, 0x1, 0x8f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "00000001", "3b8eda4d6920ba22"}, 0x28) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 901.852317ms ago: executing program 3 (id=4418): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x4, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r0}, "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"}) 820.409388ms ago: executing program 1 (id=4419): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004600070128bd700000010000017c0f8707000480362d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4020, r0}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000003500), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000f76155e4ce287527923a96bdf398c86d6665cd9d474c56d1ecbe6f435aa53c77641a2f63c86f042fdbb9384191787b96085ee7d95dc7f8934be86206ea9f50559ecbc0f0f97de9debf68d5671b9436f62c9c9f4e6188f42e2ab4840edc2b21e4f42ecfdf08a5802a2120da4845e54a925c3021b5c230b168d50ba2d1c1e626ca923edea2169e9db9a9aad530dc2c5b1709534e", @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008834}, 0x0) (async) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @multicast1}, 0xf}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 705.942834ms ago: executing program 2 (id=4420): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x18}, 0x20000110) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000b00000002a8a14903020000", @ANYRES32=0x1, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000003c0)={0x0}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}}, 0x80, 0x0}, 0x20000804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0001002cbd7001ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="fce8"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 705.619892ms ago: executing program 4 (id=4421): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"a1d0198c5a064140fe53b90f08a46d6e", 0x0, 0x0, {0x10, 0x3}, {0xfffffffffffffff9, 0x72}, 0x8, [0x9, 0x30, 0xf2d, 0x3, 0x5, 0x2, 0xec, 0xc3, 0x8, 0x8, 0x26d1, 0x9, 0xff, 0x8000000000000001, 0x0, 0x80]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000380)={{r2}, r3, 0xe, @inherit={0x88, &(0x7f0000000200)={0x0, 0x8, 0xffffffffffffc6fa, 0x7, {0x8, 0xfffffffffffffffe, 0x0, 0x1, 0xee}, [0x800, 0x6, 0x6, 0x356, 0x2c, 0x4a2777ab, 0xfe1, 0x8]}}, @subvolid}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x5, 0x1, 0xa, 0xa, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6erspan0\x00', 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 590.596726ms ago: executing program 0 (id=4422): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000012003909000019000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900"], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01e327bd7000fbdbdf250100000004000180100002800c00018008000100a1"], 0x28}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100039040000000000000000000000007a057c0467dca91860b03dc980a085f1bc73be0bb0ccc427e2aef0471d4a6a8baf12d959d392ababe8038a38d5284d0eaad3f9e042b22864e51c46a4f3260782a4a0edbcc16b32a027392b0bb815511e19a387beff08cce01e3c44969359d5edb11d6dc7c3b0a37e940fc04a609f5bac619776fdb9f08bac55ccfb28ff93", @ANYRES32=r6, @ANYBLOB="8106010000000200140012800b000100627269646765000004000280"], 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r11, &(0x7f000000c700)=[{{&(0x7f0000001040)=@l2tp6={0xa, 0x0, 0xfffffff8, @private0, 0x8d1}, 0x80, 0x0}}], 0x1, 0x8000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) getsockopt$sock_buf(r9, 0x1, 0x1a, 0x0, &(0x7f00000004c0)) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRESDEC=r13, @ANYBLOB="14ff00"/20], 0x2c}}, 0x0) r14 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r15, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) 540.870046ms ago: executing program 2 (id=4423): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x11, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x11, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="6204", 0x2}], 0x1}, 0x0) 401.888177ms ago: executing program 1 (id=4424): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x7, 0x6, 0x3ff}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x5, 0xbbd, 0x7, 0x8d6, 0x4, {r1, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x6, 0x5f5, 0x200, 0x81}}, &(0x7f0000000140)=0xb0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = socket$unix(0x1, 0x2, 0x0) ioctl(r3, 0x4f74, &(0x7f00000001c0)="e220cd05dc229eaad39babee6c0c40fc50b5535ed599841e5aa123a793fbc8373b72b71ab13c82b0549a59204c2d7f3efaf7d9ec6f5e6fe4b759ffbcf3e049216a97c3dc6673e4d592de3b1d32377753a05929387e14b515b74c3c37aea6d3ade4eeb9ddbe29230f19f9c84f06b51fbebeb0b2e2d6fcfde7871790770bcb63694524a6319de986bbb65a3256a3f714eed9a1bc9fa4b2eb8920b6f030ffa4d83abecf5379d3db8004") setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000280)={r1, 0x8}, 0x8) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r7) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000400)={r4, &(0x7f0000000300)='(\x00', 0x98080, &(0x7f0000000340)={@align=0x9, {0x4, 0xfffd, 0x0, 0x5}}, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0xfff}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000440)=0x10001, 0x4) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000480)={'caif0\x00', 0x400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000005c0)={0x0, @dev, @initdev}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004080}, 0x8800) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r12, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40108050}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x3, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xfff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8000}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9b}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8985}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f00000008c0)={0x7, 'pimreg0\x00', {0x5}, 0x2}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000900)=0x3ff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000940)={'vcan0\x00'}) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000980)="bf9c034cfb32e57ec64e48067c558261797d97bf0c0ed9502c24c493e447ab2bdda0201543b5d7", 0x27}], 0x1, &(0x7f0000000a00)=[@flowinfo={{0x14, 0x29, 0xb, 0x8000000}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a40)="f458144703d4e720045b781c999c2e20898c00d97f5ce75f6ccd0f1e09110513e13d67718ca5b97bbee27c2e1f5f70d37ca89fa9cdc171c4bb9e04dbcf38a2dd20a9fa250e7a3d010a20e1fd742dcc38eec2f0b6889d4b777d63ca60830a754b57ad6ea0f2f5e10ac6d2744d38e5d66ba64abd9a6c355b6ad5793e5e9dc8ce5d384d40fff0b81e1d5bdba620d5f22f0b843bcb0dd988ba3c29187c", 0x9b}, {&(0x7f0000000b00)="5e04ead04d39d3868b75e4ca463d8efabce3426b9f14d56d479ff2c8a0a8b8c4f285d73409e4a2ab582f8366de0b4ad8eff57c595969b6900b1bc05e507dbcb2d131e6ba105beed193a537df02961bb592fb82966ef5a447519a7b0075b9106c0bb09841383bf686c7eb430b126f58dee39bd5cf4f9da226c3b38d39723f0fc2837d81405ed9f2d0dab80cc112ff0a95701b64c73cb73f4c255c1f6eb2ed3fb03bde8a00720bed8a143f56525509af6f310fde70c91432a86e82906c5c916cdd22552d548fbcb66d63940ce5aa66002218413e62c13c8b90afcef0d0fb98d4eb10dee9417f", 0xe5}, {&(0x7f0000000c00)="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", 0x1000}], 0x3, &(0x7f0000001c40)=[@dstopts={{0x30, 0x29, 0x37, {0x3a, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x40}, @ra={0x5, 0x2, 0x6574}, @enc_lim={0x4, 0x1, 0xfe}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x62, 0x4, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x11, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffff}]}}}], 0x90}}], 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x885}, 0x24040801) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, r13, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x1) 347.89364ms ago: executing program 0 (id=4425): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'w\x00'}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = accept4(r1, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x80, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f0000000140)=""/10, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4000080) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000300)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r6, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x1) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r11, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100}, 0x4004001) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x2, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r12, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r12, 0x4) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x8, 0x1, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x30000085) splice(r1, &(0x7f0000000880)=0x3, r2, &(0x7f00000008c0)=0xa, 0x3, 0x1) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x2, &(0x7f0000000900)=0x3, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x2, &(0x7f0000000900)=0x3, 0x4) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x80000) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r11, 0xd, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r11, 0xd, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r2) (async) r15 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r2) sendmsg$FOU_CMD_ADD(r14, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r15, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x4c2d2466ae518a2f}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) (async) sendmsg$FOU_CMD_ADD(r14, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r15, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x4c2d2466ae518a2f}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) write(r0, &(0x7f0000000cc0)="f7108234fc8f272a711043b1b46007a55d4943e338f8342b704cd83c8ca4bf65fe0c087a2a7658200dc1ceeae0c1ea8fd7db2ad55b3babfc49c0dbf6043be64ed0c1acab92b5e98b04d4933b07ded4d636a20e3005bb098d9f247585e977f0bc577e09f7301499e0bd44e60f2304566021dc4b4d7385b0b4686d87b585dcc5c25b095b559aac0a71e562d394f7d2ad81d43d145576ceabdf387ef7fae41b36fac0333f496555cb3a6dd54a730d477ed1ce4f7664c364d80f32b743bb06a6e0e6765c6b344569511bce4f8637793f970035f55b2e783de78b58f3d3f5bf98902e2b1ad2129c3446cbe83083", 0xeb) 313.73339ms ago: executing program 2 (id=4426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000140001000000000000c300d92d"], 0x5c}}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r7, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "abd955", 0x44, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xf1, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x7, 0x1, 0x1, 0x0, 0x7, 0x3}, 0x2, {0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x24, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) (async) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000080)) (async) close(r9) (async) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001000)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0x0, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x3, {0xd}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@loopback, @remote, 0xff, 0xffffff00, 0x9, 0x5, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x5, 0x5, 0x3, 0x800, 0x19, 'dvmrp1\x00', 'vlan0\x00', {}, {}, 0x0, 0x114}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) 141.573196ms ago: executing program 1 (id=4427): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100000000000000000000a0000000000000000000000080006000400000008000400", @ANYRES32=0x0, @ANYRES32=r0], 0x34}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c044) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00\x00\x00'], 0x20) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$tcp_mem(r2, &(0x7f00000003c0)={0x0, 0x20, 0x80000001, 0x20, 0x8000000000006}, 0xfeb0) 18.432713ms ago: executing program 2 (id=4428): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400004bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x8818) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x8818) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmsg$can_raw(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1}, 0x40010042) (async) recvmsg$can_raw(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1}, 0x40010042) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/171, 0xab}], 0x6}, 0x22120) (async) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/171, 0xab}], 0x6}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 18.180086ms ago: executing program 0 (id=4429): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000800)={{r0, &(0x7f0000000040)='!,!-@\'.\x00', 0x10100, &(0x7f0000000080)={@_ha_fsid, {0x9, 0x3, 0x3, 0x10}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x24}, 0x4, &(0x7f0000000600)=[{0x2, 0xb625, &(0x7f0000000140)='memory.events\x00', &(0x7f0000000200)="ad6ab096d0ce968e175f44696d97e18c3e0449002e3aa725c49a1d7f09ed47b2b5a1d93efc5c78303876bf84aff00671fef2dc3c43801e77a80ca0577f7bde3db5292c0425fda30aca4ca8da3f502b8caf9617898e7a80bfe6a1af54137313d82270ff0134daba75b41a0e5a9a9e12d2fdf09b027e9ec31b33861e39d12ea393b574f5c0c82480549fc4c68746be1dd120ef18cb1993699977e9033c31", 0x9d, 0x8}, {0x0, 0xfaee, &(0x7f0000000180)='/)\x00', &(0x7f00000002c0)="da5d585ec2643737a609db3fd1afaaf39b8af42a7f1509da76bfd49f6ed198b169aa060cbd9fa96a948ff3e05b2586f265bb7526b8d273d79acf869b06aac1f174cd65f9633a7c51ba957b081552592ad245b1240ce6ee4b97867cf2e45bebe97c22f50c03998eb31207b1fcd6e0ceb4d53476fdbc87ef4ab43f1bb7a9824d53f7abb1c2c2fdeb74ae78375154ca6f4c730552a5bf712f06d4928ec8a75ded598add701382fe96fe98530160a6bf9ab8a709cadd55a0ce9cfd6448af2a827153a4cd5b05093c1d30f8fe04fad9", 0xcd}, {0x2, 0x3c9c00, &(0x7f0000000680)='memory.events\x00', &(0x7f0000000500)="e6f0d8cc369ae0e045ac5632a0ded6f1ebb8e846e0391973f252f69f312bc43da3d3d8249c3154e18f5aaa9bcd5ee51294a4f0379402115aad2e76059998ab4b489758b3bc86bd827da231653d5934a2024ca3f9176a5773f2431127a45440f1537062b578498bc5fff3708168cb3cbaed66ef8fdd0be6492c76bccc3ed5879d9e735705ad95e829182413fd4212343981a625fb57e2c4650870722d6a6bda18edd29c4a6936360c0d056532956b6a9bbda5a946d4186113be0ce4274aaffd603fa87ab4cb0edc7085295e963eeb04b9ce46deaa648ad402e1542f9b4de55f53c588d3ca9c52833ed7a2440ba3b3a9ca64520af60f", 0xf5}, {0x1, 0x3, &(0x7f0000000400)='memory.events\x00', &(0x7f0000000440)="447c92d9495fe8916b31cd751fda28b7854f6df69a85ed386f11d0dd16d08ea6ad9b49bcc4cfd6d01ea63f7dc0da08", 0x2f, 0x2}]}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="649edf8e", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000085) r4 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000008, 0x6e071, 0xffffffffffffffff, 0x80000000) 0s ago: executing program 3 (id=4430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(r3) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000180)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) kernel console output (not intermixed with test programs): 406.882180][T17186] bridge_slave_0: entered promiscuous mode [ 406.916465][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3001'. [ 406.939121][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.970535][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.982285][T17186] bridge_slave_1: entered allmulticast mode [ 406.994233][T17186] bridge_slave_1: entered promiscuous mode [ 407.211112][T17327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3004'. [ 407.285035][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.312363][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.331335][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'. [ 407.818792][T17186] team0: Port device team_slave_0 added [ 407.873927][T17186] team0: Port device team_slave_1 added [ 408.074531][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.099390][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.149424][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.187780][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.195701][ T5822] Bluetooth: hci4: command tx timeout [ 408.201327][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.260137][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.298782][T17357] batadv0: entered promiscuous mode [ 408.304960][T17357] vlan2: entered promiscuous mode [ 408.447536][T17186] hsr_slave_0: entered promiscuous mode [ 408.461718][T17186] hsr_slave_1: entered promiscuous mode [ 408.480753][T17186] debugfs: 'hsr0' already exists in 'hsr' [ 408.489885][T17186] Cannot create hsr debugfs directory [ 408.613020][T17364] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3011'. [ 409.098193][T17342] lo speed is unknown, defaulting to 1000 [ 409.106524][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 409.300640][T17340] lo speed is unknown, defaulting to 1000 [ 409.468117][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 410.270152][ T5822] Bluetooth: hci4: command 0x0419 tx timeout [ 410.361537][T17411] lo speed is unknown, defaulting to 1000 [ 410.469337][T17411] lo speed is unknown, defaulting to 1000 [ 410.535568][T17404] syzkaller0: entered promiscuous mode [ 410.549808][T17404] syzkaller0: entered allmulticast mode [ 410.565658][T17411] lo speed is unknown, defaulting to 1000 [ 411.236141][T17411] infiniband syz0: set active [ 411.249767][T17411] infiniband syz0: added lo [ 411.260741][T17411] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 411.290972][T17411] infiniband syz0: Couldn't open port 1 [ 411.373764][T17411] RDS/IB: syz0: added [ 411.377875][T17411] smc: adding ib device syz0 with port count 1 [ 411.390409][T17411] smc: ib device syz0 port 1 has no pnetid [ 412.361628][ T5831] Bluetooth: hci4: command 0x0419 tx timeout [ 412.410825][ T9] lo speed is unknown, defaulting to 1000 [ 412.476583][ T5920] lo speed is unknown, defaulting to 1000 [ 412.485339][T17411] lo speed is unknown, defaulting to 1000 [ 412.721424][T17186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 412.757405][T17186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 412.825608][T17186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.838183][ T13] IPVS: stop unused estimator thread 0... [ 412.902554][T17186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 412.966321][T17450] dvmrp0: entered allmulticast mode [ 412.992274][T17455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3026'. [ 413.301857][T17186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.363019][T17186] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.382516][T17411] lo speed is unknown, defaulting to 1000 [ 413.407952][T12619] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.415258][T12619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.450206][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.457432][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.105043][T17411] lo speed is unknown, defaulting to 1000 [ 414.170549][T17499] openvswitch: netlink: Key 32 has unexpected len 12 expected 2 [ 414.319411][T17186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.402531][T17186] veth0_vlan: entered promiscuous mode [ 414.438383][T17186] veth1_vlan: entered promiscuous mode [ 414.525170][T17186] veth0_macvtap: entered promiscuous mode [ 414.547424][T17186] veth1_macvtap: entered promiscuous mode [ 414.602250][T17186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.643221][T17186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.680047][ T5932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.696853][T17411] lo speed is unknown, defaulting to 1000 [ 414.708787][ T5932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.742083][ T5932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.767613][ T5932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.026444][T17411] lo speed is unknown, defaulting to 1000 [ 415.216181][T17411] lo speed is unknown, defaulting to 1000 [ 417.123996][T17499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.190454][T12619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.198338][T12619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.240333][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.248242][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.242094][T17528] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 432.255400][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 432.274980][T17534] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3038'. [ 432.303598][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3038'. [ 432.333510][T17528] netlink: 'syz.0.3034': attribute type 4 has an invalid length. [ 432.477629][T17541] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3039'. [ 432.511521][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 432.557198][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.609369][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.618443][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.631477][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.639288][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 432.696377][T17545] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.704306][T17545] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.738806][T17557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 432.787307][T17557] openvswitch: netlink: IP tunnel dst address not specified [ 432.991330][T17545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.004664][T17545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.207113][T16633] lo speed is unknown, defaulting to 1000 [ 433.229881][T16633] syz0: Port: 1 Link DOWN [ 433.235375][T16357] lo speed is unknown, defaulting to 1000 [ 433.459063][T12619] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.475426][T12619] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.486537][T12619] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.526342][T12619] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.546990][T17577] netlink: 'syz.2.3046': attribute type 32 has an invalid length. [ 433.782348][T17587] bond2: option fail_over_mac: invalid value (127) [ 433.798984][T17587] bond2 (unregistering): Released all slaves [ 434.050894][T17546] lo speed is unknown, defaulting to 1000 [ 434.066888][T17546] lo speed is unknown, defaulting to 1000 [ 434.153409][T17609] netlink: 'syz.0.3055': attribute type 8 has an invalid length. [ 434.161450][T17609] sch_fq: defrate 0 ignored. [ 434.168460][T17609] netlink: 'syz.0.3055': attribute type 2 has an invalid length. [ 434.224536][T17609] 9: entered promiscuous mode [ 434.670493][ T5831] Bluetooth: hci3: command tx timeout [ 434.961043][T17638] pim6reg: entered allmulticast mode [ 434.995306][T17546] chnl_net:caif_netlink_parms(): no params data found [ 435.043842][T17634] pim6reg: left allmulticast mode [ 435.254517][T17649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3065'. [ 435.318066][T17649] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3065'. [ 435.355311][T17546] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.396692][T17546] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.430110][T17546] bridge_slave_0: entered allmulticast mode [ 435.445109][T17546] bridge_slave_0: entered promiscuous mode [ 435.483372][T17546] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.520120][T17546] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.527728][T17546] bridge_slave_1: entered allmulticast mode [ 435.570759][T17546] bridge_slave_1: entered promiscuous mode [ 435.673257][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 435.700624][T17546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.723832][T17546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.743507][T17664] bridge_slave_1: left allmulticast mode [ 435.749277][T17664] bridge_slave_1: left promiscuous mode [ 435.758376][T17673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3070'. [ 435.770421][T17664] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.790922][T17664] bridge_slave_0: left allmulticast mode [ 435.796742][T17664] bridge_slave_0: left promiscuous mode [ 435.803367][T17664] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.914582][T17546] team0: Port device team_slave_0 added [ 435.957310][T17546] team0: Port device team_slave_1 added [ 435.998729][T17546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.008292][T17546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.035911][T17546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.063157][T17546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.071472][T17546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.098677][T17546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.264266][T17546] hsr_slave_0: entered promiscuous mode [ 436.281961][T17546] hsr_slave_1: entered promiscuous mode [ 436.288690][T17546] debugfs: 'hsr0' already exists in 'hsr' [ 436.295266][T17546] Cannot create hsr debugfs directory [ 436.751115][ T5831] Bluetooth: hci3: command tx timeout [ 437.142990][T17723] bond0: (slave bond_slave_0): Releasing backup interface [ 437.418845][T17731] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 437.520734][T17737] __nla_validate_parse: 41 callbacks suppressed [ 437.520756][T17737] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3083'. [ 437.536890][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 437.548642][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3084'. [ 437.768595][T17744] bridge_slave_0: left allmulticast mode [ 437.777836][T17744] bridge_slave_0: left promiscuous mode [ 437.785870][T17744] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.831388][T17744] bridge_slave_1: left allmulticast mode [ 437.837199][T17744] bridge_slave_1: left promiscuous mode [ 437.843463][T17744] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.886363][T17750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3087'. [ 437.897655][T17744] bond0: (slave bond_slave_0): Releasing backup interface [ 437.910611][T17744] bond0: (slave bond_slave_1): Releasing backup interface [ 437.927486][T17744] team0: Port device team_slave_0 removed [ 437.947509][T17744] team0: Port device team_slave_1 removed [ 437.958963][T17744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.981145][T17744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.999469][T17744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.103045][T17757] netlink: 'syz.2.3089': attribute type 1 has an invalid length. [ 438.191868][T17760] bond13: Unable to set up delay as MII monitoring is disabled [ 438.201622][T17760] bond13 (unregistering): Released all slaves [ 438.255198][T17761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3090'. [ 438.406489][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 438.571944][T17546] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.609887][T17782] tipc: Started in network mode [ 438.647356][T17782] tipc: Node identity 86725157cd27, cluster identity 4711 [ 438.656864][T17782] tipc: Enabled bearer , priority 0 [ 438.672049][T17546] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.705752][T17774] tipc: Resetting bearer [ 438.724190][T17773] tipc: Disabling bearer [ 438.788441][T17790] netlink: 192852 bytes leftover after parsing attributes in process `syz.2.3098'. [ 438.806132][T17546] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.815861][T17790] netlink: Conntrack attr has 4 unknown bytes [ 438.836337][ T5831] Bluetooth: hci3: command tx timeout [ 438.848731][T17546] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 438.888926][ T30] audit: type=1800 audit(1771024658.373:8): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3099" name="memory.events" dev="tmpfs" ino=299 res=0 errno=0 [ 439.225480][T17810] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3101'. [ 439.674408][T17818] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3104'. [ 440.666411][T17546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.697472][T17546] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.753075][T12621] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.760331][T12621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.793450][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'. [ 440.818694][T12621] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.825933][T12621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.862210][T17821] syz_tun: entered promiscuous mode [ 440.870542][T17821] macvtap1: entered promiscuous mode [ 440.876084][T17821] macvtap1: entered allmulticast mode [ 440.897483][T17821] syz_tun: entered allmulticast mode [ 440.909702][ T5831] Bluetooth: hci3: command tx timeout [ 440.922770][T17826] syz_tun: left allmulticast mode [ 440.928293][T17826] syz_tun: left promiscuous mode [ 441.055979][T17825] syzkaller0: entered promiscuous mode [ 441.099686][T17825] syzkaller0: entered allmulticast mode [ 441.536826][T17546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.639312][T17843] lo speed is unknown, defaulting to 1000 [ 441.647465][T17843] lo speed is unknown, defaulting to 1000 [ 443.334164][T17864] __nla_validate_parse: 2 callbacks suppressed [ 443.334179][T17864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 443.364967][T17832] lo speed is unknown, defaulting to 1000 [ 443.410949][T17832] lo speed is unknown, defaulting to 1000 [ 443.473258][T17546] veth0_vlan: entered promiscuous mode [ 443.536301][T17546] veth1_vlan: entered promiscuous mode [ 443.722996][T17546] veth0_macvtap: entered promiscuous mode [ 443.745705][T17546] veth1_macvtap: entered promiscuous mode [ 443.777638][T17878] xt_hashlimit: size too large, truncated to 1048576 [ 443.820335][T17880] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3117'. [ 443.847580][T17546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.872768][T17546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.893288][T17611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.917792][T17611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.960564][T17611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.994301][T17611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.456790][T17611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.472158][T17611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.514783][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3119'. [ 444.771698][T17887] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 444.784214][T17887] bond2 (unregistering): Released all slaves [ 444.869414][T17886] macvtap1: entered promiscuous mode [ 444.881137][T17886] bond0: entered promiscuous mode [ 444.886663][T17886] macvtap1: entered allmulticast mode [ 444.892317][T17886] bond0: entered allmulticast mode [ 444.898158][T17886] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 444.916891][T17889] bond0: left allmulticast mode [ 444.922509][T17889] bond0: left promiscuous mode [ 444.948910][T17874] lo speed is unknown, defaulting to 1000 [ 444.954960][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.954986][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.001845][T17874] lo speed is unknown, defaulting to 1000 [ 445.342530][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 445.642634][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 445.918151][T17918] ipt_REJECT: TCP_RESET invalid for non-tcp [ 446.141313][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3130'. [ 446.440512][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3129'. [ 447.050281][T17962] netlink: 'syz.4.3139': attribute type 16 has an invalid length. [ 447.058173][T17962] netlink: 'syz.4.3139': attribute type 17 has an invalid length. [ 447.304393][T17969] wg1: entered promiscuous mode [ 447.310170][T17969] wg1: entered allmulticast mode [ 447.365340][T17971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3143'. [ 447.447721][T17974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'. [ 447.459228][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 447.473712][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.524188][T17974] tc_dump_action: action bad kind [ 447.557180][T17974] bridge0: port 1(ip6gretap1) entered blocking state [ 447.584662][T17974] bridge0: port 1(ip6gretap1) entered disabled state [ 447.620010][T17974] ip6gretap1: entered allmulticast mode [ 447.638143][T17974] ip6gretap1: entered promiscuous mode [ 448.226163][T18018] tipc: Started in network mode [ 448.244756][T18018] tipc: Node identity , cluster identity 4711 [ 448.274535][T18018] tipc: Failed to set node id, please configure manually [ 448.303085][T18018] tipc: Enabling of bearer rejected, failed to enable media [ 448.368601][T18031] pimreg: tun_chr_ioctl cmd 1074025677 [ 448.382971][T18031] pimreg: linktype set to 0 [ 448.848892][T18047] __nla_validate_parse: 3 callbacks suppressed [ 448.848914][T18047] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3160'. [ 449.037090][ T5482] veth0_macvtap: left promiscuous mode [ 449.071310][T18052] »»»»»»: renamed from vlan1 [ 449.366007][T18072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3165'. [ 449.394299][T18071] tipc: Started in network mode [ 449.408790][T18071] tipc: Node identity de9a38feb974, cluster identity 4711 [ 449.445514][T18071] tipc: Enabled bearer , priority 0 [ 449.452795][T18080] syzkaller0: entered promiscuous mode [ 449.458413][T18080] syzkaller0: entered allmulticast mode [ 449.838451][T18069] tipc: Resetting bearer [ 449.873339][T18102] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3173'. [ 449.885294][T18069] tipc: Disabling bearer [ 449.896824][T18102] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 450.035190][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 450.199332][T18121] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3177'. [ 450.562714][T18132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.614569][T18132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.843676][T18123] lo speed is unknown, defaulting to 1000 [ 450.901850][T18123] lo speed is unknown, defaulting to 1000 [ 451.305884][T18142] lo speed is unknown, defaulting to 1000 [ 451.537105][T18173] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3187'. [ 451.592734][T18173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3187'. [ 451.603014][T18142] lo speed is unknown, defaulting to 1000 [ 451.613159][T18173] nbd: must specify at least one socket [ 451.909180][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3191'. [ 451.938907][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3192'. [ 451.985640][T18189] bond2: entered promiscuous mode [ 451.991345][T18189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.003840][T18189] bond2 (unregistering): Released all slaves [ 452.085235][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3192'. [ 452.221266][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 452.547942][T18205] ip6gretap0: entered promiscuous mode [ 452.587746][T18205] ip6gretap0: left promiscuous mode [ 452.604672][T18208] netlink: 'syz.0.3195': attribute type 13 has an invalid length. [ 453.752328][ T5932] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.762930][ T5932] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.793255][ T5932] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.819791][ T5932] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.075100][T18250] __nla_validate_parse: 4 callbacks suppressed [ 454.075123][T18250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3209'. [ 454.096472][T18251] ip6tnl0: Caught tx_queue_len zero misconfig [ 454.112091][T18251] netlink: 'syz.0.3211': attribute type 1 has an invalid length. [ 454.143193][T18251] netlink: 'syz.0.3211': attribute type 2 has an invalid length. [ 454.157547][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3211'. [ 454.169010][T18251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3211'. [ 454.184579][T18251] netlink: 'syz.0.3211': attribute type 1 has an invalid length. [ 454.193473][T18251] netlink: 'syz.0.3211': attribute type 2 has an invalid length. [ 454.203061][T18251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3211'. [ 454.468818][T18269] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3216'. [ 454.481426][T18269] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3216'. [ 454.582479][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3217'. [ 454.817587][T18286] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3218'. [ 454.855929][T18286] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 455.160545][T18286] syzkaller1: entered allmulticast mode [ 455.287950][T18300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3222'. [ 455.319149][T18303] geneve2: entered promiscuous mode [ 455.328388][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3222'. [ 455.340971][T18303] geneve2: entered allmulticast mode [ 455.496552][T18310] pim6reg1: entered promiscuous mode [ 455.506379][T18310] pim6reg1: entered allmulticast mode [ 455.517067][T18310] Cannot find add_set index 0 as target [ 455.853231][T18329] tipc: Enabled bearer , priority 0 [ 455.874768][T18323] tipc: Enabling of bearer rejected, already enabled [ 455.892742][T18329] syzkaller0: entered promiscuous mode [ 455.918850][T18329] syzkaller0: entered allmulticast mode [ 455.945115][T18323] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 455.998950][T18323] tipc: Resetting bearer [ 456.015816][T18322] tipc: Resetting bearer [ 456.077038][T18322] tipc: Disabling bearer [ 456.124643][T16357] IPVS: starting estimator thread 0... [ 456.262261][T18339] IPVS: using max 36 ests per chain, 86400 per kthread [ 456.597509][T18358] xt_TCPMSS: Only works on TCP SYN packets [ 456.621384][T18360] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 456.967816][T18381] tipc: Enabling of bearer rejected, failed to enable media [ 457.126625][T18389] xt_hashlimit: max too large, truncated to 1048576 [ 457.204238][T16627] IPVS: starting estimator thread 0... [ 457.222558][T18392] netlink: 'syz.1.3247': attribute type 1 has an invalid length. [ 457.241391][T18396] netlink: 'syz.4.3248': attribute type 1 has an invalid length. [ 457.329725][T18394] IPVS: using max 34 ests per chain, 81600 per kthread [ 458.863107][T18392] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 459.050849][T18429] macvlan1: entered allmulticast mode [ 459.076101][T18429] veth1_vlan: entered allmulticast mode [ 459.112936][T18435] netlink: 'syz.1.3253': attribute type 1 has an invalid length. [ 459.138618][T18436] netlink: 'syz.4.3254': attribute type 10 has an invalid length. [ 459.206219][T18435] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 459.218706][T18435] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 459.258745][T18448] __nla_validate_parse: 12 callbacks suppressed [ 459.258766][T18448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3253'. [ 459.467075][T18460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3257'. [ 459.535824][T18448] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 459.681452][T18473] bond1: option mode: unable to set because the bond device is up [ 459.726996][T18473] bond_slave_0: entered promiscuous mode [ 459.733224][T18473] bond_slave_1: entered promiscuous mode [ 459.745647][T18473] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 459.759187][T18473] bond1: (slave macvlan4): making interface the new active one [ 459.769157][T18473] bond1: (slave macvlan4): Enslaving as an active interface with an up link [ 459.810417][T18483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3263'. [ 459.837135][T18477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.913779][T18489] netlink: 'syz.4.3260': attribute type 1 has an invalid length. [ 459.959751][T18489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.017704][T18478] bond4 (unregistering): Released all slaves [ 460.074067][T18482] bond_slave_0: entered promiscuous mode [ 460.079896][T18482] bond_slave_1: entered promiscuous mode [ 460.102110][T18482] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 460.122640][T18482] bond1: (slave macvlan3): making interface the new active one [ 460.132216][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3265'. [ 460.143227][T18482] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 460.534996][T18517] syzkaller1: entered promiscuous mode [ 460.547461][T18517] syzkaller1: entered allmulticast mode [ 460.663431][T18526] netlink: 'syz.4.3274': attribute type 13 has an invalid length. [ 460.907441][T18540] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3277'. [ 461.332108][T18519] lo speed is unknown, defaulting to 1000 [ 461.400419][T18519] lo speed is unknown, defaulting to 1000 [ 461.666644][T18558] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 461.799182][T18558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3284'. [ 462.231673][T18578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.352894][T18585] bond_slave_1: entered promiscuous mode [ 462.382387][T18585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 462.417479][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 462.448931][T18585] bond2: (slave macvlan2): making interface the new active one [ 462.485609][T18585] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 462.787653][T18615] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 462.950998][T18615] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 462.963961][T18626] netlink: 'syz.4.3297': attribute type 11 has an invalid length. [ 463.170381][T18637] ip6gretap0: entered promiscuous mode [ 463.196499][T18637] macsec1: entered promiscuous mode [ 463.208931][T18637] macsec1: entered allmulticast mode [ 463.248878][T18644] siw: device registration error -23 [ 463.254390][T18637] ip6gretap0: entered allmulticast mode [ 463.345017][T18637] ip6gretap0: left allmulticast mode [ 463.359144][T18637] ip6gretap0: left promiscuous mode [ 463.447344][T18636] ip6gretap0: entered promiscuous mode [ 463.472632][T18636] macsec1: entered promiscuous mode [ 463.478207][T18636] macsec1: entered allmulticast mode [ 463.483761][T18636] ip6gretap0: entered allmulticast mode [ 463.510869][T18652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3298'. [ 463.537207][T18636] ip6gretap0: left allmulticast mode [ 463.543982][T18636] ip6gretap0: left promiscuous mode [ 464.063404][T18659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3303'. [ 464.556931][T18666] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.564795][T18666] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.606103][T18666] bond_slave_0: left promiscuous mode [ 464.646851][T18666] bond_slave_1: left promiscuous mode [ 465.023147][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.033971][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.051287][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.059649][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.067808][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.153442][T18666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.210434][T18666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.412556][T18666] veth1_vlan: left allmulticast mode [ 465.558342][T18666] geneve2: left promiscuous mode [ 465.567291][T18666] geneve2: left allmulticast mode [ 465.583226][T18666] macvtap1: left promiscuous mode [ 465.588522][T18666] macvtap1: left allmulticast mode [ 465.644584][T17611] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.669711][T18702] delete_channel: no stack [ 465.679620][T17611] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.720912][T17611] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.736273][T17611] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.759787][T17611] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.786696][T17611] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.856520][T18718] vlan2: entered promiscuous mode [ 465.869756][T18718] bond0: entered promiscuous mode [ 465.893535][T17611] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.912995][T17611] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.219626][T18741] xt_TPROXY: Can be used only with -p tcp or -p udp [ 466.424581][T18750] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 466.675662][T18688] lo speed is unknown, defaulting to 1000 [ 466.721451][T18750] gretap2: entered promiscuous mode [ 466.860196][T18746] syzkaller1: entered promiscuous mode [ 466.865738][T18746] syzkaller1: entered allmulticast mode [ 466.958115][T18688] lo speed is unknown, defaulting to 1000 [ 467.149786][ T5831] Bluetooth: hci0: command tx timeout [ 467.326317][T18726] lo speed is unknown, defaulting to 1000 [ 467.501843][T18726] lo speed is unknown, defaulting to 1000 [ 468.134015][T12622] dvmrp0 (unregistering): left allmulticast mode [ 469.014039][T12622] bond3 (unregistering): (slave macvlan5): Releasing active interface [ 469.045680][T12622] bond0 (unregistering): Released all slaves [ 469.057998][T12622] bond1 (unregistering): Released all slaves [ 469.076707][T12622] bond2 (unregistering): Released all slaves [ 469.096885][T12622] bond3 (unregistering): Released all slaves [ 469.114673][T12622] bond4 (unregistering): Released all slaves [ 469.134785][T12622] bond5 (unregistering): Released all slaves [ 469.174383][T12622] bond6 (unregistering): Released all slaves [ 469.199130][T12622] bond7 (unregistering): Released all slaves [ 469.219221][T12622] bond8 (unregistering): Released all slaves [ 469.229808][ T5831] Bluetooth: hci0: command tx timeout [ 469.254680][T12622] bond9 (unregistering): Released all slaves [ 469.272922][T12622] bond10 (unregistering): Released all slaves [ 469.297268][T12622] bond11 (unregistering): Released all slaves [ 469.324102][T12622] bond12 (unregistering): Released all slaves [ 469.633838][T12622] hmac(sha224): left promiscuous mode [ 469.819419][T12622] tipc: Disabling bearer [ 469.831183][T12622] tipc: Left network mode [ 470.338477][T18688] chnl_net:caif_netlink_parms(): no params data found [ 470.388919][T18798] lo speed is unknown, defaulting to 1000 [ 470.733614][T18798] lo speed is unknown, defaulting to 1000 [ 470.767381][T18838] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.3337'. [ 470.830912][T18838] openvswitch: netlink: Message has 6 unknown bytes. [ 471.309653][ T5831] Bluetooth: hci0: command tx timeout [ 471.325538][T18688] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.339478][T18688] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.413573][T18851] netlink: 'syz.3.3339': attribute type 7 has an invalid length. [ 471.429953][T18688] bridge_slave_0: entered allmulticast mode [ 471.438077][T18688] bridge_slave_0: entered promiscuous mode [ 471.438082][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3339'. [ 471.456433][T18688] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.463791][T18688] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.474471][T18688] bridge_slave_1: entered allmulticast mode [ 471.492492][T18688] bridge_slave_1: entered promiscuous mode [ 471.650611][T17611] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.659820][T18851] netlink: 'syz.3.3339': attribute type 7 has an invalid length. [ 471.690666][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3339'. [ 471.877668][ T1334] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.886635][ T1334] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.950928][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 472.056240][T18688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.110405][T18688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.137374][T18856] netlink: 'syz.3.3341': attribute type 1 has an invalid length. [ 472.171513][ T1334] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.451619][T18856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.594069][T18688] team0: Port device team_slave_0 added [ 472.665773][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3342'. [ 472.678515][T18688] team0: Port device team_slave_1 added [ 472.976003][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3344'. [ 473.079169][T18880] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 473.091003][T18880] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 473.390748][ T5831] Bluetooth: hci0: command tx timeout [ 473.576292][T18800] Set syz1 is full, maxelem 65536 reached [ 473.707975][T17612] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.719662][T17612] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.809936][T18899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3346'. [ 473.839846][T18688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.846892][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.875303][T18688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.889633][T17612] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.926132][T18688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.933456][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.967527][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'. [ 473.978708][T18688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.991930][T17612] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.017838][T18900] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3346'. [ 474.086381][T18903] sctp: [Deprecated]: syz.2.3347 (pid 18903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.086381][T18903] Use struct sctp_sack_info instead [ 474.090687][T18899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3346'. [ 474.244659][T18903] : entered promiscuous mode [ 474.316877][T18908] FAULT_INJECTION: forcing a failure. [ 474.316877][T18908] name failslab, interval 1, probability 0, space 0, times 0 [ 474.340134][T18908] CPU: 0 UID: 0 PID: 18908 Comm: syz.3.3349 Not tainted syzkaller #0 PREEMPT(full) [ 474.340185][T18908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 474.340200][T18908] Call Trace: [ 474.340209][T18908] [ 474.340218][T18908] dump_stack_lvl+0xe8/0x150 [ 474.340254][T18908] should_fail_ex+0x412/0x560 [ 474.340292][T18908] should_failslab+0xa8/0x100 [ 474.340327][T18908] __kmalloc_cache_noprof+0x88/0x660 [ 474.340384][T18908] ? __pfx_stack_trace_save+0x10/0x10 [ 474.340417][T18908] ? rtnl_newlink+0x136/0x1be0 [ 474.340447][T18908] rtnl_newlink+0x136/0x1be0 [ 474.340472][T18908] ? kasan_save_track+0x4f/0x80 [ 474.340497][T18908] ? kasan_save_track+0x3e/0x80 [ 474.340521][T18908] ? kasan_save_free_info+0x46/0x50 [ 474.340542][T18908] ? __kasan_slab_free+0x5c/0x80 [ 474.340569][T18908] ? kmem_cache_free+0x180/0x610 [ 474.340597][T18908] ? __dev_queue_xmit+0x168f/0x3850 [ 474.340627][T18908] ? __netlink_deliver_tap+0x5ad/0x850 [ 474.340648][T18908] ? netlink_deliver_tap+0x19c/0x1b0 [ 474.340668][T18908] ? netlink_unicast+0x7e3/0x9b0 [ 474.340697][T18908] ? netlink_sendmsg+0x813/0xb40 [ 474.340721][T18908] ? __pfx_rtnl_newlink+0x10/0x10 [ 474.340742][T18908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.340806][T18908] ? kasan_quarantine_put+0xbb/0x1f0 [ 474.340833][T18908] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.340866][T18908] ? nlmon_xmit+0xb0/0x100 [ 474.340897][T18908] ? kmem_cache_free+0x180/0x610 [ 474.340939][T18908] ? __lock_acquire+0x6b5/0x2cf0 [ 474.340974][T18908] ? __local_bh_enable_ip+0xd0/0x130 [ 474.341000][T18908] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.341027][T18908] ? __dev_queue_xmit+0x274/0x3850 [ 474.341055][T18908] ? __local_bh_enable_ip+0xd0/0x130 [ 474.341077][T18908] ? __dev_queue_xmit+0x274/0x3850 [ 474.341116][T18908] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 474.341157][T18908] ? __pfx_rtnl_newlink+0x10/0x10 [ 474.341187][T18908] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 474.341215][T18908] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 474.341237][T18908] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.341260][T18908] ? ref_tracker_free+0x693/0x840 [ 474.341291][T18908] ? __copy_skb_header+0xa3/0x4a0 [ 474.341322][T18908] ? __pfx_ref_tracker_free+0x10/0x10 [ 474.341374][T18908] netlink_rcv_skb+0x232/0x4b0 [ 474.341398][T18908] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.341425][T18908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.341459][T18908] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.341491][T18908] netlink_unicast+0x80f/0x9b0 [ 474.341533][T18908] ? __pfx_netlink_unicast+0x10/0x10 [ 474.341567][T18908] ? netlink_sendmsg+0x650/0xb40 [ 474.341586][T18908] ? skb_put+0x11b/0x210 [ 474.341615][T18908] netlink_sendmsg+0x813/0xb40 [ 474.341647][T18908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.341675][T18908] ? aa_sock_msg_perm+0xf1/0x1b0 [ 474.341708][T18908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.341741][T18908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.341763][T18908] ____sys_sendmsg+0xa68/0xad0 [ 474.341791][T18908] ? __might_fault+0xaf/0x130 [ 474.341824][T18908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.341862][T18908] ? import_iovec+0x73/0xa0 [ 474.341890][T18908] ___sys_sendmsg+0x2a5/0x360 [ 474.341917][T18908] ? __lock_acquire+0x6b5/0x2cf0 [ 474.341945][T18908] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.342012][T18908] ? __fget_files+0x2a/0x420 [ 474.342033][T18908] ? __fget_files+0x3a0/0x420 [ 474.342066][T18908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 474.342097][T18908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.342136][T18908] ? __pfx_ksys_write+0x10/0x10 [ 474.342177][T18908] do_syscall_64+0x14d/0xf80 [ 474.342206][T18908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.342227][T18908] ? trace_irq_disable+0x37/0x100 [ 474.342252][T18908] ? clear_bhb_loop+0x40/0x90 [ 474.342279][T18908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.342301][T18908] RIP: 0033:0x7f2b8e39bf79 [ 474.342321][T18908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.342340][T18908] RSP: 002b:00007f2b8f27b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.342373][T18908] RAX: ffffffffffffffda RBX: 00007f2b8e616090 RCX: 00007f2b8e39bf79 [ 474.342390][T18908] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 474.342404][T18908] RBP: 00007f2b8f27b090 R08: 0000000000000000 R09: 0000000000000000 [ 474.342418][T18908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.342431][T18908] R13: 00007f2b8e616128 R14: 00007f2b8e616090 R15: 00007fff988a8378 [ 474.342468][T18908] [ 474.843367][T18906] bond1: option mode: unable to set because the bond device has slaves [ 475.015816][T18688] hsr_slave_0: entered promiscuous mode [ 475.049350][T18688] hsr_slave_1: entered promiscuous mode [ 475.068616][T18688] debugfs: 'hsr0' already exists in 'hsr' [ 475.075523][T18688] Cannot create hsr debugfs directory [ 475.351151][T12622] IPVS: stop unused estimator thread 0... [ 475.831187][T18916] lo speed is unknown, defaulting to 1000 [ 475.838783][T18916] lo speed is unknown, defaulting to 1000 [ 476.129671][T18958] netlink: 'syz.3.3359': attribute type 1 has an invalid length. [ 476.166135][T18961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'. [ 476.213899][T18958] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 476.242868][T18961] bond2: entered promiscuous mode [ 476.256977][T18961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.458975][T18973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.469030][T18973] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 476.485185][T18973] bond2: (slave sit1): Error -95 calling set_mac_address [ 476.532136][T18976] bond1: option mode: unable to set because the bond device has slaves [ 476.565386][T18976] FAULT_INJECTION: forcing a failure. [ 476.565386][T18976] name failslab, interval 1, probability 0, space 0, times 0 [ 476.631785][T18976] CPU: 1 UID: 0 PID: 18976 Comm: syz.3.3362 Not tainted syzkaller #0 PREEMPT(full) [ 476.631816][T18976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 476.631829][T18976] Call Trace: [ 476.631837][T18976] [ 476.631845][T18976] dump_stack_lvl+0xe8/0x150 [ 476.631878][T18976] should_fail_ex+0x412/0x560 [ 476.631914][T18976] should_failslab+0xa8/0x100 [ 476.631946][T18976] __kmalloc_cache_noprof+0x88/0x660 [ 476.631972][T18976] ? __pfx_stack_trace_save+0x10/0x10 [ 476.632004][T18976] ? rtnl_newlink+0x136/0x1be0 [ 476.632038][T18976] rtnl_newlink+0x136/0x1be0 [ 476.632062][T18976] ? kasan_save_track+0x4f/0x80 [ 476.632086][T18976] ? kasan_save_track+0x3e/0x80 [ 476.632119][T18976] ? kasan_save_free_info+0x46/0x50 [ 476.632139][T18976] ? __kasan_slab_free+0x5c/0x80 [ 476.632165][T18976] ? kmem_cache_free+0x180/0x610 [ 476.632191][T18976] ? __dev_queue_xmit+0x168f/0x3850 [ 476.632219][T18976] ? __netlink_deliver_tap+0x5ad/0x850 [ 476.632239][T18976] ? netlink_deliver_tap+0x19c/0x1b0 [ 476.632259][T18976] ? netlink_unicast+0x7e3/0x9b0 [ 476.632286][T18976] ? netlink_sendmsg+0x813/0xb40 [ 476.632308][T18976] ? __pfx_rtnl_newlink+0x10/0x10 [ 476.632328][T18976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.632387][T18976] ? kasan_quarantine_put+0xbb/0x1f0 [ 476.632412][T18976] ? lockdep_hardirqs_on+0x7a/0x110 [ 476.632444][T18976] ? nlmon_xmit+0xb0/0x100 [ 476.632472][T18976] ? kmem_cache_free+0x180/0x610 [ 476.632522][T18976] ? __lock_acquire+0x6b5/0x2cf0 [ 476.632555][T18976] ? __local_bh_enable_ip+0xd0/0x130 [ 476.632579][T18976] ? lockdep_hardirqs_on+0x7a/0x110 [ 476.632604][T18976] ? __dev_queue_xmit+0x274/0x3850 [ 476.632630][T18976] ? __local_bh_enable_ip+0xd0/0x130 [ 476.632652][T18976] ? __dev_queue_xmit+0x274/0x3850 [ 476.632686][T18976] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 476.632725][T18976] ? __pfx_rtnl_newlink+0x10/0x10 [ 476.632747][T18976] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 476.632773][T18976] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 476.632794][T18976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.632815][T18976] ? ref_tracker_free+0x693/0x840 [ 476.632843][T18976] ? __copy_skb_header+0xa3/0x4a0 [ 476.632871][T18976] ? __pfx_ref_tracker_free+0x10/0x10 [ 476.632913][T18976] netlink_rcv_skb+0x232/0x4b0 [ 476.632935][T18976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 476.632967][T18976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.633000][T18976] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.633030][T18976] netlink_unicast+0x80f/0x9b0 [ 476.633069][T18976] ? __pfx_netlink_unicast+0x10/0x10 [ 476.633108][T18976] ? netlink_sendmsg+0x650/0xb40 [ 476.633127][T18976] ? skb_put+0x11b/0x210 [ 476.633154][T18976] netlink_sendmsg+0x813/0xb40 [ 476.633186][T18976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.633210][T18976] ? aa_sock_msg_perm+0xf1/0x1b0 [ 476.633241][T18976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.633271][T18976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.633292][T18976] ____sys_sendmsg+0xa68/0xad0 [ 476.633318][T18976] ? __might_fault+0xaf/0x130 [ 476.633350][T18976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.633386][T18976] ? import_iovec+0x73/0xa0 [ 476.633411][T18976] ___sys_sendmsg+0x2a5/0x360 [ 476.633436][T18976] ? __lock_acquire+0x6b5/0x2cf0 [ 476.633463][T18976] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.633527][T18976] ? __fget_files+0x2a/0x420 [ 476.633546][T18976] ? __fget_files+0x3a0/0x420 [ 476.633577][T18976] __x64_sys_sendmsg+0x1bd/0x2a0 [ 476.633607][T18976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.633644][T18976] ? __pfx_ksys_write+0x10/0x10 [ 476.633681][T18976] do_syscall_64+0x14d/0xf80 [ 476.633708][T18976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.633727][T18976] ? trace_irq_disable+0x37/0x100 [ 476.633750][T18976] ? clear_bhb_loop+0x40/0x90 [ 476.633774][T18976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.633794][T18976] RIP: 0033:0x7f2b8e39bf79 [ 476.633814][T18976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.633830][T18976] RSP: 002b:00007f2b8f29c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.633853][T18976] RAX: ffffffffffffffda RBX: 00007f2b8e615fa0 RCX: 00007f2b8e39bf79 [ 476.633868][T18976] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 476.633881][T18976] RBP: 00007f2b8f29c090 R08: 0000000000000000 R09: 0000000000000000 [ 476.633894][T18976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.633906][T18976] R13: 00007f2b8e616038 R14: 00007f2b8e615fa0 R15: 00007fff988a8378 [ 476.633940][T18976] [ 477.236785][T18688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.302454][T18688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.349012][T18992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.578757][T18688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.654804][T18992] macsec1: entered promiscuous mode [ 477.715704][T18688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.083592][T18688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.139329][T18688] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.162825][T17614] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.170085][T17614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.205599][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.212950][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.434926][T19029] openvswitch: netlink: Duplicate key (type 21). [ 478.607943][T19035] lo: Caught tx_queue_len zero misconfig [ 478.779214][T18994] lo speed is unknown, defaulting to 1000 [ 478.816461][T18994] lo speed is unknown, defaulting to 1000 [ 479.053530][T18688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.120502][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'. [ 479.153839][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3373'. [ 479.205139][T19061] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3373'. [ 479.263329][T19065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3375'. [ 479.379987][T19071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3375'. [ 479.495223][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3375'. [ 479.861700][T17552] udevd[17552]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 480.336445][T18688] veth0_vlan: entered promiscuous mode [ 480.376332][T18688] veth1_vlan: entered promiscuous mode [ 480.433162][T19115] netlink: 38 bytes leftover after parsing attributes in process `syz.2.3385'. [ 480.474961][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3386'. [ 480.514218][T18688] veth0_macvtap: entered promiscuous mode [ 480.689014][T18688] veth1_macvtap: entered promiscuous mode [ 480.788288][T18688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.853248][T18688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.903153][T17614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.926483][T11741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.950360][T11741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.048420][T11741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.226183][T11741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.246766][T11741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.314847][T19142] syzkaller0: entered promiscuous mode [ 481.333831][T19142] syzkaller0: entered allmulticast mode [ 481.403651][T19144] tipc: Enabling of bearer rejected, failed to enable media [ 481.754483][T19162] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3398'. [ 482.744829][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cf20800: rx timeout, send abort [ 482.755444][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf20800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 483.105233][T17614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.118371][T17614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.222608][T19167] netlink: 'syz.0.3400': attribute type 1 has an invalid length. [ 483.231749][T19167] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3400'. [ 483.246367][T19167] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3400'. [ 483.282348][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3399'. [ 483.293294][T19170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.300852][T19170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.331345][T19170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.338819][T19170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.397072][T19167] macsec1: entered promiscuous mode [ 483.405747][T19167] macsec1: entered allmulticast mode [ 483.418747][T19179] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3307'. [ 483.440442][T19179] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3307'. [ 483.556225][T19184] netlink: 'syz.1.3403': attribute type 1 has an invalid length. [ 483.581559][T19184] netlink: 'syz.1.3403': attribute type 3 has an invalid length. [ 483.606281][T19184] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3403'. [ 483.628659][T19193] netlink: 'syz.2.3405': attribute type 29 has an invalid length. [ 483.641245][T19193] netlink: 'syz.2.3405': attribute type 29 has an invalid length. [ 483.657249][T19187] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3404'. [ 483.661962][T19184] netlink: 'syz.1.3403': attribute type 7 has an invalid length. [ 483.674259][T19184] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3403'. [ 483.685667][T19193] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3405'. [ 483.729843][T19193] unsupported nla_type 58 [ 483.965779][T19199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 484.377069][T19241] netlink: 'syz.3.3422': attribute type 10 has an invalid length. [ 484.439179][T19241] veth0_vlan: left promiscuous mode [ 484.490216][T19241] veth0_vlan: entered promiscuous mode [ 484.540117][T19241] team0: Device veth0_vlan failed to register rx_handler [ 484.660841][T19231] lo speed is unknown, defaulting to 1000 [ 484.676092][T19231] lo speed is unknown, defaulting to 1000 [ 484.757799][T19250] syzkaller0: entered promiscuous mode [ 484.777933][T19250] syzkaller0: entered allmulticast mode [ 485.156776][T19262] siw: device registration error -23 [ 485.415457][T19270] bond4: entered allmulticast mode [ 485.421160][T19270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.789246][T19290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.194974][T19302] netlink: 'syz.0.3439': attribute type 10 has an invalid length. [ 486.205708][T19300] syzkaller0: entered promiscuous mode [ 486.232164][T19300] syzkaller0: entered allmulticast mode [ 486.248529][T19305] netlink: 'syz.0.3439': attribute type 10 has an invalid length. [ 486.376547][T19302] team0: Failed to send options change via netlink (err -105) [ 486.401579][T19302] team0: Port device dummy0 added [ 486.471782][T19305] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 486.486927][T19305] team0: Failed to send options change via netlink (err -105) [ 486.508874][T19305] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 486.534120][T19305] team0: Port device dummy0 removed [ 486.563879][T19305] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 486.594646][T19311] tipc: Started in network mode [ 486.600496][T19311] tipc: Node identity 3e7e3c2572fa, cluster identity 4711 [ 486.611627][T19311] tipc: Enabled bearer , priority 0 [ 486.663896][T19299] tipc: Resetting bearer [ 486.795591][T19299] tipc: Disabling bearer [ 486.868099][T19320] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 487.153320][T19330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.184317][T19332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.262715][T19327] __nla_validate_parse: 4 callbacks suppressed [ 487.262734][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3443'. [ 487.581261][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3449'. [ 487.751044][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3453'. [ 487.952966][T19382] netlink: 'syz.3.3458': attribute type 1 has an invalid length. [ 487.963036][T19380] ipt_REJECT: TCP_RESET invalid for non-tcp [ 487.979936][T19385] ipt_REJECT: TCP_RESET invalid for non-tcp [ 488.033601][T19386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3458'. [ 488.078039][T19386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.110949][T19382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.128152][T19382] bond4: (slave geneve2): making interface the new active one [ 488.155013][T19382] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 488.186614][T17611] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 488.201979][T17611] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 488.229951][T17611] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 488.239057][T17611] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 488.254598][T19391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3460'. [ 488.267108][T17611] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.284701][T19391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 488.304737][T17611] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.331023][T17611] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.341671][T17611] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.391424][T19396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3461'. [ 488.413705][T19398] team_slave_0: entered promiscuous mode [ 488.419548][T19398] team_slave_1: entered promiscuous mode [ 488.425963][T19398] macsec1: entered promiscuous mode [ 488.432641][T19398] team0: entered promiscuous mode [ 488.438497][T19398] macsec1: entered allmulticast mode [ 488.445310][T19398] team0: entered allmulticast mode [ 488.451274][T19398] team_slave_0: entered allmulticast mode [ 488.457134][T19398] team_slave_1: entered allmulticast mode [ 488.465055][T19398] team0: Device macsec1 is already an upper device of the team interface [ 488.481976][T19398] team0: left allmulticast mode [ 488.487571][T19398] team_slave_0: left allmulticast mode [ 488.496847][T19399] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3461'. [ 488.497992][T19398] team_slave_1: left allmulticast mode [ 488.520088][T19398] team0: left promiscuous mode [ 488.532270][T19398] team_slave_0: left promiscuous mode [ 488.537766][T19398] team_slave_1: left promiscuous mode [ 488.582415][T19399] bond0 (unregistering): Released all slaves [ 488.723901][T19407] syzkaller0: entered promiscuous mode [ 488.729971][T19407] syzkaller0: entered allmulticast mode [ 488.791759][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3468'. [ 489.093737][T19431] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 489.127827][T19433] netlink: 'syz.0.3476': attribute type 3 has an invalid length. [ 489.203312][T19433] bond3: entered promiscuous mode [ 489.522030][T19458] netlink: 'syz.3.3483': attribute type 1 has an invalid length. [ 489.876694][T19475] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3486'. [ 490.283240][T19471] lo speed is unknown, defaulting to 1000 [ 490.301819][T19471] lo speed is unknown, defaulting to 1000 [ 490.822834][T19507] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 490.866647][T19514] SET target dimension over the limit! [ 490.894549][T19507] syzkaller0: entered promiscuous mode [ 490.900323][T19507] syzkaller0: entered allmulticast mode [ 490.915565][T19515] tipc: Enabled bearer , priority 0 [ 490.967151][T19506] tipc: Resetting bearer [ 491.313667][T19527] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 491.814104][T19533] nbd: nbd64 already in use [ 492.334911][T19549] Cannot find add_set index 2 as target [ 492.672841][T19506] tipc: Disabling bearer [ 492.699961][T16626] tipc: Node number set to 1283734565 [ 492.713715][T19546] 8021q: VLANs not supported on sit0 [ 492.968037][T19562] __nla_validate_parse: 6 callbacks suppressed [ 492.968059][T19562] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3507'. [ 493.018747][T19562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3507'. [ 493.300189][T19569] team0 (unregistering): Port device team_slave_0 removed [ 493.331983][T19569] team0 (unregistering): Port device team_slave_1 removed [ 493.429919][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3510'. [ 493.465995][T19577] netlink: 'syz.1.3510': attribute type 12 has an invalid length. [ 493.583919][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3510'. [ 493.598885][T19577] netlink: 'syz.1.3510': attribute type 12 has an invalid length. [ 493.855223][T19588] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 493.875294][T19588] bond5 (unregistering): Released all slaves [ 493.908695][T19573] lo speed is unknown, defaulting to 1000 [ 493.915597][T19596] syzkaller0: entered promiscuous mode [ 493.921210][T19596] syzkaller0: entered allmulticast mode [ 493.940817][T19573] lo speed is unknown, defaulting to 1000 [ 494.242954][T19616] netlink: 'syz.0.3522': attribute type 4 has an invalid length. [ 494.391545][T19620] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3523'. [ 494.558020][T19637] syzkaller0: entered promiscuous mode [ 494.563766][T19637] syzkaller0: entered allmulticast mode [ 494.575020][T19637] tipc: Enabled bearer , priority 0 [ 494.598135][T19634] tipc: Enabling of bearer rejected, failed to enable media [ 494.646701][T19630] tipc: Resetting bearer [ 494.949421][T19630] tipc: Disabling bearer [ 494.966566][T19576] lo speed is unknown, defaulting to 1000 [ 495.015908][T19576] lo speed is unknown, defaulting to 1000 [ 495.166452][T19660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3536'. [ 495.177344][T19660] tipc: Invalid UDP bearer configuration [ 495.177401][T19660] tipc: Enabling of bearer rejected, failed to enable media [ 495.196478][T19657] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3534'. [ 495.212899][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 495.224199][T19666] netlink: 'syz.3.3536': attribute type 13 has an invalid length. [ 495.286230][T19668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3533'. [ 495.351775][T19666] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.482637][T19666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.498226][T19666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.728857][T17614] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.748670][T17614] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.774172][T17614] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 495.810552][T17614] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.829320][T17614] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.845196][T17614] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 495.863509][T17614] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.900410][T17614] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.930340][T17614] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 496.059393][T17614] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.077470][T17614] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.116028][T17614] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 496.242566][T19696] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 496.294507][T19696] bond1: (slave macvlan4): Enslaving as an active interface with an up link [ 496.983565][T19697] netlink: 'syz.1.3542': attribute type 1 has an invalid length. [ 496.997319][T19734] tipc: Enabling of bearer rejected, failed to enable media [ 497.011455][T19697] netlink: 'syz.1.3542': attribute type 4 has an invalid length. [ 497.032292][T19697] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3542'. [ 497.046664][T19735] netlink: 'syz.1.3542': attribute type 1 has an invalid length. [ 497.055151][T19735] netlink: 'syz.1.3542': attribute type 4 has an invalid length. [ 497.154695][T19723] syzkaller0: entered promiscuous mode [ 497.160652][T19723] syzkaller0: entered allmulticast mode [ 499.298599][T19770] syzkaller0: entered promiscuous mode [ 499.314027][T19770] syzkaller0: entered allmulticast mode [ 499.449760][T19797] __nla_validate_parse: 2 callbacks suppressed [ 499.449781][T19797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3549'. [ 499.499304][T19799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3549'. [ 499.666391][T19806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3553'. [ 499.676700][T19809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'. [ 499.752071][T19812] tipc: Started in network mode [ 499.757177][T19812] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 499.773489][T19812] tipc: Enabling of bearer rejected, failed to enable media [ 499.785165][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3554'. [ 500.400304][T19743] lo speed is unknown, defaulting to 1000 [ 500.418243][T19743] lo speed is unknown, defaulting to 1000 [ 500.651750][T19836] bond2: option mode: unable to set because the bond device has slaves [ 500.690429][T19836] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 500.840765][T19842] syzkaller0: entered promiscuous mode [ 500.847117][T19842] syzkaller0: entered allmulticast mode [ 500.871306][T19838] tipc: Enabled bearer , priority 0 [ 501.193963][T19841] vlan2: entered promiscuous mode [ 501.201495][T19841] bridge0: entered promiscuous mode [ 501.227061][T19851] netlink: 'syz.2.3563': attribute type 1 has an invalid length. [ 501.236153][T19851] netlink: 'syz.2.3563': attribute type 1 has an invalid length. [ 501.244365][T19837] tipc: Resetting bearer [ 501.470375][T19837] tipc: Disabling bearer [ 501.686142][T19869] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.3571'. [ 501.695627][T19870] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3569'. [ 501.707954][T19870] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3569'. [ 501.941937][T19878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.072276][T19882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.641174][T19872] lo speed is unknown, defaulting to 1000 [ 502.653846][T19872] lo speed is unknown, defaulting to 1000 [ 502.793757][T19905] tipc: Enabled bearer , priority 0 [ 502.932315][T19912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.252659][T19873] lo speed is unknown, defaulting to 1000 [ 503.281665][T19873] lo speed is unknown, defaulting to 1000 [ 503.350126][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'. [ 503.578272][T19935] syz_tun: entered promiscuous mode [ 503.606793][T19935] syz_tun: refused to change device tx_queue_len [ 503.627382][T19935] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 503.783972][T19910] lo speed is unknown, defaulting to 1000 [ 503.807918][T19910] lo speed is unknown, defaulting to 1000 [ 503.873829][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 504.052950][ T5920] tipc: Node number set to 1743665406 [ 504.073374][T19941] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3591'. [ 504.712599][T19960] syzkaller0: entered promiscuous mode [ 504.718236][T19960] syzkaller0: entered allmulticast mode [ 506.304549][T19977] netlink: 'syz.0.3599': attribute type 1 has an invalid length. [ 507.410890][T19965] netlink: 496 bytes leftover after parsing attributes in process `syz.4.3596'. [ 507.479804][T19977] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 508.066279][T19994] bridge1: entered promiscuous mode [ 508.080503][T19994] bridge1: entered allmulticast mode [ 508.099215][T19994] team0: Port device bridge1 added [ 508.126844][T19996] bridge0: port 3(team0) entered blocking state [ 508.157280][T19996] bridge0: port 3(team0) entered disabled state [ 508.177818][T19996] team0: entered allmulticast mode [ 508.183727][T19996] team_slave_0: entered allmulticast mode [ 508.190786][T19996] team_slave_1: entered allmulticast mode [ 508.201159][T19996] team0: entered promiscuous mode [ 508.206322][T19996] team_slave_0: entered promiscuous mode [ 508.212320][T19996] team_slave_1: entered promiscuous mode [ 508.268263][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3605'. [ 508.740443][T20015] tipc: Resetting bearer [ 508.750178][T20015] tipc: Resetting bearer [ 508.877360][T20030] netlink: 616 bytes leftover after parsing attributes in process `syz.1.3612'. [ 508.915589][T20038] siw: device registration error -23 [ 509.075524][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3616'. [ 509.281819][T20085] macsec1: entered promiscuous mode [ 509.289664][T20085] macvlan1: entered promiscuous mode [ 509.324989][T20085] macvlan1: left promiscuous mode [ 509.353047][T20087] tipc: Enabling of bearer rejected, already enabled [ 509.456923][T20098] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3627'. [ 509.474368][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3626'. [ 509.500870][T20096] macvtap1: entered promiscuous mode [ 509.506300][T20096] ip6gretap0: entered promiscuous mode [ 509.513385][T20096] macvtap1: entered allmulticast mode [ 509.519621][T20096] ip6gretap0: entered allmulticast mode [ 509.531199][T20098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3627'. [ 509.622658][T20104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3628'. [ 509.697551][T20112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3632'. [ 509.706921][T20112] netlink: 'syz.2.3632': attribute type 1 has an invalid length. [ 509.723787][T20112] netlink: 'syz.2.3632': attribute type 2 has an invalid length. [ 510.227568][T20129] team0 (unregistering): Port device team_slave_0 removed [ 510.265910][T20129] team0 (unregistering): Port device team_slave_1 removed [ 510.292366][T20126] tipc: Started in network mode [ 510.297494][T20126] tipc: Node identity , cluster identity 4711 [ 510.303805][T20126] tipc: Failed to obtain node identity [ 510.330093][T20126] tipc: Enabling of bearer rejected, failed to enable media [ 510.467444][T20152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3642'. [ 510.502305][T20137] syzkaller0: entered promiscuous mode [ 510.519305][T20137] syzkaller0: entered allmulticast mode [ 511.632884][ T5831] Bluetooth: hci0: command 0x0405 tx timeout [ 512.334025][T20180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.341400][T20180] IPv6: NLM_F_CREATE should be set when creating new route [ 512.348655][T20180] IPv6: NLM_F_CREATE should be set when creating new route [ 512.681468][T20195] __nla_validate_parse: 2 callbacks suppressed [ 512.681489][T20195] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3653'. [ 512.698756][T20197] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 512.834930][T20203] netlink: 'syz.2.3656': attribute type 2 has an invalid length. [ 513.408919][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3661'. [ 513.418503][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3661'. [ 513.433631][T20221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 513.443290][T20225] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3662'. [ 513.456663][T20221] syzkaller0: entered promiscuous mode [ 513.508566][T20221] syzkaller0: entered allmulticast mode [ 513.943856][T20238] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 513.974130][T20238] netlink: 'syz.2.3666': attribute type 11 has an invalid length. [ 514.236648][T20258] netlink: 'syz.2.3671': attribute type 2 has an invalid length. [ 514.267529][T20253] bond5: entered promiscuous mode [ 514.281962][T20258] : entered promiscuous mode [ 514.291574][T20257] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3672'. [ 514.305265][T20258] netlink: 'syz.2.3671': attribute type 2 has an invalid length. [ 514.323383][T20259] vcan1: entered promiscuous mode [ 514.329352][T20259] vcan1: entered allmulticast mode [ 514.336286][T20259] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 514.405802][T20259] bond5: (slave vcan1): Error -95 calling set_mac_address [ 514.479646][T20241] lo speed is unknown, defaulting to 1000 [ 514.487526][T20241] lo speed is unknown, defaulting to 1000 [ 514.517857][T20265] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 514.642200][T20274] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3676'. [ 514.688549][T20270] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 514.804351][T20281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3679'. [ 515.278362][T20302] netlink: 'syz.0.3683': attribute type 1 has an invalid length. [ 515.357867][T20302] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 515.358688][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3684'. [ 515.477981][T20267] lo speed is unknown, defaulting to 1000 [ 515.491695][T20267] lo speed is unknown, defaulting to 1000 [ 515.631689][T20317] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3686'. [ 515.719740][T20319] sctp: [Deprecated]: syz.0.3687 (pid 20319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.719740][T20319] Use struct sctp_sack_info instead [ 516.118920][T20334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.508858][T20339] openvswitch: netlink: Flow actions attr not present in new flow. [ 516.894262][T20360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.706072][T20405] __nla_validate_parse: 3 callbacks suppressed [ 517.706092][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'. [ 517.763735][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3712'. [ 517.816661][T20417] delete_channel: no stack [ 517.968226][T20423] tipc: Enabled bearer , priority 0 [ 517.988218][T20423] syzkaller0: entered promiscuous mode [ 517.999863][T20423] syzkaller0: entered allmulticast mode [ 518.078317][T20423] tipc: Resetting bearer [ 518.112809][T20443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3722'. [ 518.173475][T20422] tipc: Resetting bearer [ 518.262779][T20422] tipc: Disabling bearer [ 518.283752][T20450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3724'. [ 518.534692][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3730'. [ 518.547608][T20471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3730'. [ 518.611103][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3730'. [ 518.631622][T20471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3730'. [ 518.713994][T20475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3731'. [ 519.040371][T20486] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3736'. [ 519.074806][T20484] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 519.235194][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 519.715483][T20532] sctp: [Deprecated]: syz.3.3747 (pid 20532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.715483][T20532] Use struct sctp_sack_info instead [ 519.758621][T20536] bond2: entered allmulticast mode [ 519.771093][T20537] sctp: [Deprecated]: syz.3.3747 (pid 20537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.771093][T20537] Use struct sctp_sack_info instead [ 520.093690][T20557] geneve0: entered promiscuous mode [ 520.109962][T20557] geneve0: entered allmulticast mode [ 520.154276][T20033] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.163515][T20033] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.187622][T20033] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.197908][T20033] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.748817][T16626] IPVS: starting estimator thread 0... [ 520.892075][ T5831] block nbd1: Receive control failed (result -32) [ 520.999771][T20588] IPVS: using max 30 ests per chain, 72000 per kthread [ 521.114611][T20583] lo speed is unknown, defaulting to 1000 [ 521.123780][T20583] lo speed is unknown, defaulting to 1000 [ 521.319884][T20596] syzkaller0: entered promiscuous mode [ 521.359806][T20596] syzkaller0: entered allmulticast mode [ 521.420217][T20580] netlink: 'syz.1.3759': attribute type 2 has an invalid length. [ 521.489153][T20580] wg1 speed is unknown, defaulting to 1000 [ 521.502230][T20580] wg1 speed is unknown, defaulting to 1000 [ 521.517793][T20597] Bluetooth: MGMT ver 1.23 [ 521.676614][T20580] wg1 speed is unknown, defaulting to 1000 [ 521.736208][T20580] infiniband sy+Û: RDMA CMA: cma_listen_on_dev, error -98 [ 521.793880][T20609] netlink: 'syz.4.3765': attribute type 19 has an invalid length. [ 521.931290][T20580] wg1 speed is unknown, defaulting to 1000 [ 521.978692][T20580] wg1 speed is unknown, defaulting to 1000 [ 522.029190][T20580] wg1 speed is unknown, defaulting to 1000 [ 522.074144][T20580] wg1 speed is unknown, defaulting to 1000 [ 522.162212][T20580] wg1 speed is unknown, defaulting to 1000 [ 522.171934][T20580] wg1 speed is unknown, defaulting to 1000 [ 522.214508][T20580] wg1 speed is unknown, defaulting to 1000 [ 523.144835][T20637] __nla_validate_parse: 13 callbacks suppressed [ 523.144862][T20637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3774'. [ 523.200885][T20638] openvswitch: netlink: Message has 2 unknown bytes. [ 523.219663][T20638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.454732][T20653] netlink: 'syz.1.3779': attribute type 62 has an invalid length. [ 523.776911][T20665] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3783'. [ 523.796462][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3783'. [ 523.811560][T20664] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3782'. [ 524.351168][ T5831] Bluetooth: hci4: command 0x0419 tx timeout [ 524.811933][T20696] lo: Caught tx_queue_len zero misconfig [ 524.818293][T20696] netlink: 'syz.0.3790': attribute type 2 has an invalid length. [ 524.852714][T20698] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.3791'. [ 525.058798][T20707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3795'. [ 525.328493][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3798'. [ 525.351224][T20710] netlink: 'syz.1.3796': attribute type 1 has an invalid length. [ 525.378246][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3796'. [ 525.404336][T20710] netlink: 'syz.1.3796': attribute type 2 has an invalid length. [ 525.413043][T20710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3796'. [ 525.889650][T20717] lo speed is unknown, defaulting to 1000 [ 525.897552][T20717] lo speed is unknown, defaulting to 1000 [ 526.197753][T20738] bond3: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 526.207699][T20738] bond3: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 526.262869][T20717] wg1 speed is unknown, defaulting to 1000 [ 526.613874][T20718] lo speed is unknown, defaulting to 1000 [ 526.631738][T20718] lo speed is unknown, defaulting to 1000 [ 526.960622][T20770] Cannot find add_set index 2 as target [ 526.990983][T20766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.145580][T20777] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 527.157842][T20777] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 527.185888][T20718] wg1 speed is unknown, defaulting to 1000 [ 527.193185][T20777] FAULT_INJECTION: forcing a failure. [ 527.193185][T20777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.237345][T20777] CPU: 1 UID: 0 PID: 20777 Comm: syz.2.3814 Not tainted syzkaller #0 PREEMPT(full) [ 527.237375][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 527.237389][T20777] Call Trace: [ 527.237397][T20777] [ 527.237406][T20777] dump_stack_lvl+0xe8/0x150 [ 527.237440][T20777] should_fail_ex+0x412/0x560 [ 527.237476][T20777] _copy_from_user+0x2d/0xb0 [ 527.237499][T20777] ___sys_sendmsg+0x1c6/0x360 [ 527.237525][T20777] ? __lock_acquire+0x6b5/0x2cf0 [ 527.237553][T20777] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.237616][T20777] ? __fget_files+0x2a/0x420 [ 527.237636][T20777] ? __fget_files+0x3a0/0x420 [ 527.237667][T20777] __x64_sys_sendmsg+0x1bd/0x2a0 [ 527.237697][T20777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.237741][T20777] ? rcu_is_watching+0x15/0xb0 [ 527.237778][T20777] do_syscall_64+0x14d/0xf80 [ 527.237805][T20777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.237825][T20777] ? trace_irq_disable+0x37/0x100 [ 527.237848][T20777] ? clear_bhb_loop+0x40/0x90 [ 527.237873][T20777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.237893][T20777] RIP: 0033:0x7ff0ebb9bf79 [ 527.237912][T20777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.237929][T20777] RSP: 002b:00007ff0ecada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.237952][T20777] RAX: ffffffffffffffda RBX: 00007ff0ebe15fa0 RCX: 00007ff0ebb9bf79 [ 527.237968][T20777] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 527.237981][T20777] RBP: 00007ff0ecada090 R08: 0000000000000000 R09: 0000000000000000 [ 527.237994][T20777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.238006][T20777] R13: 00007ff0ebe16038 R14: 00007ff0ebe15fa0 R15: 00007fffc5c0f4c8 [ 527.238040][T20777] [ 527.501542][T20781] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 527.609385][T20784] pimreg: entered allmulticast mode [ 527.631361][T20779] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3816'. [ 527.760015][T20785] pimreg: left allmulticast mode [ 527.870192][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 528.055123][T20801] netlink: 'syz.2.3820': attribute type 11 has an invalid length. [ 528.407123][T20806] netlink: 'syz.3.3823': attribute type 33 has an invalid length. [ 528.484919][T20808] __nla_validate_parse: 2 callbacks suppressed [ 528.484942][T20808] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3824'. [ 528.502080][T20808] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3824'. [ 528.514203][T20808] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 528.599325][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 528.881936][T20818] syzkaller0: entered promiscuous mode [ 528.892299][T20818] syzkaller0: entered allmulticast mode [ 529.313265][T20835] netlink: 'syz.0.3833': attribute type 21 has an invalid length. [ 529.353852][T20835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3833'. [ 529.364430][T20809] xt_bpf: check failed: parse error [ 529.392559][T20844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3833'. [ 529.403512][T20835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3833'. [ 529.474592][T20839] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3835'. [ 529.504511][T20852] syzkaller0: entered promiscuous mode [ 529.531744][T20852] syzkaller0: entered allmulticast mode [ 529.571948][T20852] FAULT_INJECTION: forcing a failure. [ 529.571948][T20852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.589780][T20804] lo speed is unknown, defaulting to 1000 [ 529.597568][T20804] lo speed is unknown, defaulting to 1000 [ 529.613077][T20852] CPU: 0 UID: 0 PID: 20852 Comm: syz.1.3837 Not tainted syzkaller #0 PREEMPT(full) [ 529.613113][T20852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 529.613126][T20852] Call Trace: [ 529.613134][T20852] [ 529.613143][T20852] dump_stack_lvl+0xe8/0x150 [ 529.613176][T20852] should_fail_ex+0x412/0x560 [ 529.613211][T20852] _copy_from_iter+0x3b0/0x1670 [ 529.613243][T20852] ? process_measurement+0x195e/0x1c80 [ 529.613275][T20852] ? __pfx__copy_from_iter+0x10/0x10 [ 529.613312][T20852] ? dev_get_by_index+0x22/0x2e0 [ 529.613349][T20852] ? dev_get_by_index+0x22/0x2e0 [ 529.613385][T20852] packet_sendmsg+0x30b2/0x50f0 [ 529.613419][T20852] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 529.613449][T20852] ? __lock_acquire+0x6b5/0x2cf0 [ 529.613482][T20852] ? unwind_next_frame+0xa5/0x23c0 [ 529.613526][T20852] ? aa_sk_perm+0x15a/0x960 [ 529.613556][T20852] ? aa_sk_perm+0x82d/0x960 [ 529.613581][T20852] ? __pfx_packet_sendmsg+0x10/0x10 [ 529.613615][T20852] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 529.613653][T20852] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.613683][T20852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.613714][T20852] ? __pfx_packet_sendmsg+0x10/0x10 [ 529.613738][T20852] ____sys_sendmsg+0xa68/0xad0 [ 529.613775][T20852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.613811][T20852] ? import_iovec+0x73/0xa0 [ 529.613835][T20852] ___sys_sendmsg+0x2a5/0x360 [ 529.613861][T20852] ? __lock_acquire+0x6b5/0x2cf0 [ 529.613886][T20852] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.613951][T20852] ? __fget_files+0x2a/0x420 [ 529.613971][T20852] ? __fget_files+0x3a0/0x420 [ 529.614002][T20852] __x64_sys_sendmsg+0x1bd/0x2a0 [ 529.614032][T20852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.614069][T20852] ? __pfx_ksys_write+0x10/0x10 [ 529.614107][T20852] do_syscall_64+0x14d/0xf80 [ 529.614134][T20852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.614153][T20852] ? trace_irq_disable+0x37/0x100 [ 529.614178][T20852] ? clear_bhb_loop+0x40/0x90 [ 529.614218][T20852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.614239][T20852] RIP: 0033:0x7f946d39bf79 [ 529.614267][T20852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.614284][T20852] RSP: 002b:00007f946e26b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.614315][T20852] RAX: ffffffffffffffda RBX: 00007f946d615fa0 RCX: 00007f946d39bf79 [ 529.614331][T20852] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 529.614351][T20852] RBP: 00007f946e26b090 R08: 0000000000000000 R09: 0000000000000000 [ 529.614364][T20852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.614376][T20852] R13: 00007f946d616038 R14: 00007f946d615fa0 R15: 00007ffe898e48f8 [ 529.614410][T20852] [ 530.043925][T20862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3839'. [ 530.267730][T20804] wg1 speed is unknown, defaulting to 1000 [ 530.466398][T20842] lo speed is unknown, defaulting to 1000 [ 530.480391][T20842] lo speed is unknown, defaulting to 1000 [ 530.605964][T20874] syzkaller0: entered promiscuous mode [ 530.611779][T20874] syzkaller0: entered allmulticast mode [ 530.630098][T20881] tipc: Enabled bearer , priority 0 [ 530.689319][T20873] tipc: Resetting bearer [ 530.757611][T20889] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3846'. [ 532.382406][T20873] tipc: Disabling bearer [ 532.397009][T20842] wg1 speed is unknown, defaulting to 1000 [ 532.403213][T17555] tipc: Node number set to 4278255617 [ 532.557232][T20909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3848'. [ 532.812416][T20930] netlink: 'syz.3.3853': attribute type 10 has an invalid length. [ 532.836257][T20930] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3853'. [ 533.664133][T20935] lo speed is unknown, defaulting to 1000 [ 533.667711][T20959] __nla_validate_parse: 3 callbacks suppressed [ 533.667764][T20959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3860'. [ 533.707649][T20935] lo speed is unknown, defaulting to 1000 [ 533.757032][T20963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3861'. [ 534.211089][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3864'. [ 534.245346][T20979] syzkaller0: entered promiscuous mode [ 534.256441][T20979] syzkaller0: entered allmulticast mode [ 534.277660][T20981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3864'. [ 534.430159][T20935] wg1 speed is unknown, defaulting to 1000 [ 534.492401][T20991] x_tables: duplicate underflow at hook 1 [ 535.015644][T21005] bond6 (unregistering): Released all slaves [ 535.077093][T21012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3872'. [ 535.345197][T21024] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 535.409043][T21027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3876'. [ 535.428542][T21027] nbd: illegal input index -1113835520 [ 535.458780][T21034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3877'. [ 535.538164][T21034] vlan2: entered promiscuous mode [ 535.569841][T21034] gretap0: entered promiscuous mode [ 535.607114][T21036] netlink: 'syz.3.3878': attribute type 1 has an invalid length. [ 535.664092][T21036] bond7: entered promiscuous mode [ 535.674060][T21036] 8021q: adding VLAN 0 to HW filter on device bond7 [ 535.681414][T21040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3878'. [ 535.700726][T21041] netlink: 'syz.2.3879': attribute type 1 has an invalid length. [ 535.712413][T21041] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3879'. [ 535.723653][T21041] NCSI netlink: No device for ifindex 0 [ 535.729762][T21040] bond7: entered allmulticast mode [ 535.953311][T21036] bond7: (slave bridge2): making interface the new active one [ 535.973711][T21036] bridge2: entered promiscuous mode [ 535.984842][T21040] xt_hashlimit: size too large, truncated to 1048576 [ 535.991852][T21040] xt_hashlimit: max too large, truncated to 1048576 [ 535.999815][T21036] bridge2: entered allmulticast mode [ 536.007281][T21036] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 536.086203][T21063] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.3884'. [ 536.097090][T21063] openvswitch: netlink: Message has 5 unknown bytes. [ 536.447005][T21081] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 536.740977][T21101] netlink: 'syz.0.3896': attribute type 3 has an invalid length. [ 536.870897][T21105] IPVS: set_ctl: invalid protocol: 92 172.20.20.67:21 [ 536.930602][T21109] netlink: 'syz.0.3900': attribute type 178 has an invalid length. [ 537.493061][T21105] lo speed is unknown, defaulting to 1000 [ 537.560830][T21105] lo speed is unknown, defaulting to 1000 [ 537.824288][T21132] sctp: [Deprecated]: syz.1.3906 (pid 21132) Use of int in max_burst socket option. [ 537.824288][T21132] Use struct sctp_assoc_value instead [ 537.848592][T21114] lo speed is unknown, defaulting to 1000 [ 538.115146][T21144] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 538.174236][T21114] lo speed is unknown, defaulting to 1000 [ 538.174254][T21105] wg1 speed is unknown, defaulting to 1000 [ 538.270072][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 538.293687][T21149] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 538.467063][T21149] bond0: entered promiscuous mode [ 538.483661][T21149] gretap0: entered promiscuous mode [ 538.517006][T21149] hsr1: entered promiscuous mode [ 538.540611][T21114] wg1 speed is unknown, defaulting to 1000 [ 538.762854][T21161] netlink: 'syz.1.3914': attribute type 10 has an invalid length. [ 538.787207][T21161] syz_tun: entered promiscuous mode [ 539.035082][T21168] __nla_validate_parse: 9 callbacks suppressed [ 539.035102][T21168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3917'. [ 539.319963][T21173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.399871][T21175] xt_cgroup: invalid path, errno=-2 [ 539.531781][ T30] audit: type=1800 audit(1771024759.023:9): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3917" name="memory.events" dev="tmpfs" ino=948 res=0 errno=0 [ 540.249453][T21186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3920'. [ 540.530895][T21206] bridge_slave_1: left allmulticast mode [ 540.536626][T21206] bridge_slave_1: left promiscuous mode [ 540.579171][T21206] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.238593][T21212] lo speed is unknown, defaulting to 1000 [ 541.250504][T21212] lo speed is unknown, defaulting to 1000 [ 541.364664][T21235] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 541.582630][T21212] wg1 speed is unknown, defaulting to 1000 [ 541.646762][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3933'. [ 542.132232][T21242] lo speed is unknown, defaulting to 1000 [ 542.138165][T21257] C: renamed from team_slave_0 [ 542.145494][T21257] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3938'. [ 542.159643][T21242] lo speed is unknown, defaulting to 1000 [ 542.278097][T21260] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3939'. [ 542.290929][T21261] netlink: 'syz.0.3940': attribute type 13 has an invalid length. [ 542.299185][T21261] netlink: 'syz.0.3940': attribute type 17 has an invalid length. [ 542.299332][T21260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3939'. [ 542.317202][T21260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3939'. [ 542.326637][T21260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3939'. [ 542.336460][T21260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3939'. [ 542.347024][T21260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3939'. [ 542.550776][T21261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.560519][T21261] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.572403][T21261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.588572][T12622] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.611885][T12622] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.630893][T12622] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.648171][T12622] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.728688][T21242] wg1 speed is unknown, defaulting to 1000 [ 543.051724][T21278] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 543.236353][T21278] syzkaller0: entered promiscuous mode [ 543.248177][T21278] syzkaller0: entered allmulticast mode [ 543.997479][T21316] bridge_slave_1: left allmulticast mode [ 544.008507][T21316] bridge_slave_1: left promiscuous mode [ 544.035622][T21316] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.044612][T21320] __nla_validate_parse: 182 callbacks suppressed [ 544.044631][T21320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 544.072792][T21316] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.091615][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 544.101037][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 544.111232][T21322] netlink: 336 bytes leftover after parsing attributes in process `syz.3.3958'. [ 544.123976][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 544.159659][T21322] netlink: 336 bytes leftover after parsing attributes in process `syz.3.3958'. [ 544.186510][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 544.430167][T21339] tipc: Enabling of bearer rejected, already enabled [ 544.591738][T21350] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 544.651033][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3967'. [ 544.808655][T21364] netlink: 'syz.4.3970': attribute type 1 has an invalid length. [ 544.839606][T21364] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3970'. [ 544.861405][T21364] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3970'. [ 544.915929][T21364] netlink: 'syz.4.3970': attribute type 1 has an invalid length. [ 544.928158][T21369] gretap1: entered promiscuous mode [ 544.939907][T21364] netlink: 'syz.4.3970': attribute type 8 has an invalid length. [ 544.972069][T21365] xt_CT: No such helper "snmp" [ 545.483124][T21397] vlan2: entered promiscuous mode [ 545.491975][T21397] bridge0: entered promiscuous mode [ 545.610796][T21408] xt_hashlimit: overflow, try lower: 0/0 [ 546.237579][ T30] audit: type=1107 audit(1771024765.723:10): pid=21442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 546.330379][T21399] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 546.472415][T21453] netlink: 'syz.3.3996': attribute type 2 has an invalid length. [ 546.499659][T21453] netlink: 'syz.3.3996': attribute type 11 has an invalid length. [ 546.579781][T21455] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 546.628720][T21458] netlink: ct family unspecified [ 546.638122][T21458] netlink: 'syz.2.4000': attribute type 1 has an invalid length. [ 546.658816][T21458] nbd: must specify a size in bytes for the device [ 546.734683][T21459] Bluetooth: MGMT ver 1.23 [ 547.144934][T21478] syzkaller1: entered promiscuous mode [ 547.159980][T21478] syzkaller1: entered allmulticast mode [ 547.278037][T21490] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 547.412929][T21505] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 547.557578][ T5822] Bluetooth: hci0: command 0x0405 tx timeout [ 547.581657][T21521] netlink: 'syz.4.4011': attribute type 2 has an invalid length. [ 547.618448][ T30] audit: type=1800 audit(1771024767.093:11): pid=21520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4014" name="memory.events" dev="tmpfs" ino=1093 res=0 errno=0 [ 547.877150][T21528] syzkaller0: entered promiscuous mode [ 547.883288][T21528] syzkaller0: entered allmulticast mode [ 548.134607][T21551] netlink: 'syz.2.4021': attribute type 10 has an invalid length. [ 549.692191][T21543] team0: left allmulticast mode [ 549.697297][T21543] team_slave_0: left allmulticast mode [ 549.703291][T21543] team_slave_1: left allmulticast mode [ 549.708848][T21543] team0: left promiscuous mode [ 549.713951][T21543] team_slave_0: left promiscuous mode [ 549.722931][T21543] team_slave_1: left promiscuous mode [ 549.729089][T21543] bridge0: port 3(team0) entered disabled state [ 549.742966][T21543] bond0: (slave dummy0): Releasing backup interface [ 549.752980][T21543] bridge_slave_0: left allmulticast mode [ 549.758681][T21543] bridge_slave_0: left promiscuous mode [ 549.765670][T21543] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.780859][T21543] bond0: (slave bond_slave_0): Releasing backup interface [ 549.793562][T21543] bond0: (slave bond_slave_1): Releasing backup interface [ 549.807765][T21543] team0: Port device team_slave_0 removed [ 549.818861][T21543] team0: Port device team_slave_1 removed [ 549.825435][T21543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.834369][T21543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.842979][T21543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 549.861989][T21547] team0: No ports can be present during mode change [ 549.881837][T21551] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 549.892314][T21551] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 549.904935][T21551] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 550.107354][T21587] __nla_validate_parse: 11 callbacks suppressed [ 550.107376][T21587] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4027'. [ 550.376733][T21608] netlink: 'syz.3.4033': attribute type 3 has an invalid length. [ 550.394638][T21610] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4032'. [ 550.456857][T21612] xt_hashlimit: size too large, truncated to 1048576 [ 550.469881][T21612] xt_hashlimit: max too large, truncated to 1048576 [ 550.572765][T21612] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4032'. [ 550.587280][T21611] "syz.3.4033" (21611) uses obsolete ecb(arc4) skcipher [ 550.659312][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 550.668664][T21619] netlink: 'syz.0.4035': attribute type 15 has an invalid length. [ 550.682796][T16626] IPVS: starting estimator thread 0... [ 550.690056][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 550.773220][T21620] IPVS: using max 25 ests per chain, 60000 per kthread [ 552.220450][T21631] tipc: Enabled bearer , priority 0 [ 552.369935][T21644] netlink: 'syz.0.4040': attribute type 6 has an invalid length. [ 552.385862][T21641] netlink: 'syz.4.4039': attribute type 2 has an invalid length. [ 552.403196][T21641] : entered promiscuous mode [ 552.412723][T21641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4039'. [ 552.432703][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4040'. [ 552.442599][T21647] netlink: 'syz.3.4042': attribute type 29 has an invalid length. [ 552.451792][T21644] netlink: 'syz.0.4040': attribute type 15 has an invalid length. [ 552.472682][T21647] netlink: 'syz.3.4042': attribute type 29 has an invalid length. [ 552.573964][T21657] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 552.728043][T21670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'. [ 552.758544][T21672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4048'. [ 553.067764][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4055'. [ 553.492530][T21706] syzkaller0: entered promiscuous mode [ 553.498123][T21706] syzkaller0: entered allmulticast mode [ 553.557655][T21709] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 553.808440][T21663] lo speed is unknown, defaulting to 1000 [ 553.816166][T21663] lo speed is unknown, defaulting to 1000 [ 554.318870][T21663] wg1 speed is unknown, defaulting to 1000 [ 554.476287][T21742] netlink: 'syz.4.4070': attribute type 61 has an invalid length. [ 554.501267][T21742] netlink: 'syz.4.4070': attribute type 62 has an invalid length. [ 554.537597][T21725] lo speed is unknown, defaulting to 1000 [ 554.558619][T21725] lo speed is unknown, defaulting to 1000 [ 555.069055][T21725] wg1 speed is unknown, defaulting to 1000 [ 555.087245][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 555.784382][T21781] bond1: option mode: unable to set because the bond device has slaves [ 555.815242][T21781] bond1: option mode: unable to set because the bond device has slaves [ 555.827470][T21781] __nla_validate_parse: 7 callbacks suppressed [ 555.827491][T21781] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4079'. [ 555.999258][T21785] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 556.140359][T21785] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4080'. [ 556.710670][T21783] lo speed is unknown, defaulting to 1000 [ 556.726213][T21783] lo speed is unknown, defaulting to 1000 [ 557.183946][T21783] wg1 speed is unknown, defaulting to 1000 [ 557.655672][T21857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4096'. [ 557.683131][T21857] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.4096'. [ 558.278085][T21877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4103'. [ 558.318641][T21878] netlink: 'syz.2.4102': attribute type 3 has an invalid length. [ 558.369975][T21877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4103'. [ 558.439231][T21877] tipc: Resetting bearer [ 558.446569][T21878] x_tables: duplicate underflow at hook 2 [ 558.448051][T21877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4103'. [ 558.471782][T21877] tipc: Resetting bearer [ 558.614654][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4106'. [ 558.638492][T21887] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4107'. [ 558.645534][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4106'. [ 558.689747][T21893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.702695][T21891] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.710657][T21891] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.717933][T21891] bridge_slave_0: entered allmulticast mode [ 558.727824][T21891] bridge_slave_0: entered promiscuous mode [ 558.829370][T21895] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 559.049811][T21908] netlink: 'syz.3.4113': attribute type 2 has an invalid length. [ 559.838452][T21967] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 560.254883][T21966] lo speed is unknown, defaulting to 1000 [ 560.267018][T21966] lo speed is unknown, defaulting to 1000 [ 560.371826][T21993] netlink: 'syz.0.4134': attribute type 13 has an invalid length. [ 560.432025][T21995] IPVS: length: 24 != 36888 [ 560.444218][T21995] xt_TCPMSS: Only works on TCP SYN packets [ 560.471592][T21993] tipc: Resetting bearer [ 560.769903][T22007] netlink: 'syz.0.4139': attribute type 39 has an invalid length. [ 560.791674][T21966] wg1 speed is unknown, defaulting to 1000 [ 560.842646][T22009] __nla_validate_parse: 8 callbacks suppressed [ 560.842666][T22009] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4140'. [ 561.074280][T22020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4143'. [ 561.169177][T22026] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4146'. [ 561.645468][T22020] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 561.660444][T22020] bond8 (unregistering): Released all slaves [ 561.688475][T21992] lo speed is unknown, defaulting to 1000 [ 561.711478][T22031] netem: change failed [ 561.742677][T21992] lo speed is unknown, defaulting to 1000 [ 561.979927][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4152'. [ 562.002007][T22048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.300791][T22067] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4154'. [ 562.386805][T22070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4158'. [ 562.539435][T22070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4158'. [ 562.548892][T21992] wg1 speed is unknown, defaulting to 1000 [ 562.762863][T22079] lo: Caught tx_queue_len zero misconfig [ 563.314346][T22097] netlink: 'syz.4.4165': attribute type 2 has an invalid length. [ 563.481974][T22105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4166'. [ 563.612942][T22109] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4169'. [ 563.641803][T22110] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4169'. [ 563.849923][T22119] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 563.868924][T22119] netlink: 'syz.4.4171': attribute type 2 has an invalid length. [ 564.077966][T22128] vti0: entered promiscuous mode [ 564.083681][T22128] vti0: entered allmulticast mode [ 564.236709][T22135] tunl0: Caught tx_queue_len zero misconfig [ 564.396697][T22140] tipc: Enabling of bearer rejected, already enabled [ 564.711350][T22161] netlink: 'syz.0.4186': attribute type 1 has an invalid length. [ 564.729923][T22162] netlink: 'syz.0.4186': attribute type 1 has an invalid length. [ 564.998010][T22176] syzkaller0: entered promiscuous mode [ 565.007097][T22176] syzkaller0: entered allmulticast mode [ 567.087864][T22222] __nla_validate_parse: 4 callbacks suppressed [ 567.087884][T22222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'. [ 567.250433][T22240] x_tables: duplicate underflow at hook 1 [ 567.339844][T22249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4207'. [ 567.357261][T22249] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 567.543187][T22261] netlink: 'syz.2.4211': attribute type 11 has an invalid length. [ 567.573746][T22266] x_tables: duplicate entry at hook 1 [ 567.642080][T22272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4212'. [ 567.690171][T22265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4212'. [ 567.840849][T22281] ip6gretap0: left allmulticast mode [ 567.855565][T22281] ip6gretap0: left promiscuous mode [ 568.000571][T22291] netlink: 'syz.0.4218': attribute type 1 has an invalid length. [ 568.007964][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4217'. [ 568.022956][T22291] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4218'. [ 568.036505][T22291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4218'. [ 568.167626][T22299] sctp: [Deprecated]: syz.3.4221 (pid 22299) Use of int in max_burst socket option deprecated. [ 568.167626][T22299] Use struct sctp_assoc_value instead [ 568.241209][T22307] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4223'. [ 568.759300][T22332] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4232'. [ 568.800920][T22332] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 568.830706][T22332] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 569.039844][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4236'. [ 569.168181][T22356] netlink: 'syz.0.4235': attribute type 83 has an invalid length. [ 569.453271][T22335] lo speed is unknown, defaulting to 1000 [ 569.483566][T22335] lo speed is unknown, defaulting to 1000 [ 569.576796][T22375] veth0: entered promiscuous mode [ 569.597504][T22373] veth0: left promiscuous mode [ 569.875297][T22335] wg1 speed is unknown, defaulting to 1000 [ 569.962814][T22385] siw: device registration error -23 [ 570.323789][T22402] netlink: 'syz.0.4249': attribute type 4 has an invalid length. [ 570.351093][T22402] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 571.182014][T22408] lo speed is unknown, defaulting to 1000 [ 571.189306][T22408] lo speed is unknown, defaulting to 1000 [ 571.205111][T22430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.240589][T22430] xfrm1: entered allmulticast mode [ 571.459448][T22434] syzkaller0: entered promiscuous mode [ 571.466597][T22434] syzkaller0: entered allmulticast mode [ 571.604251][T22408] wg1 speed is unknown, defaulting to 1000 [ 572.013093][T22464] netlink: 'syz.0.4272': attribute type 1 has an invalid length. [ 572.323803][T22479] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 572.336346][T22479] bond9 (unregistering): Released all slaves [ 572.386561][T22480] __nla_validate_parse: 9 callbacks suppressed [ 572.386581][T22480] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4278'. [ 572.467183][T22456] lo speed is unknown, defaulting to 1000 [ 572.495465][T22456] lo speed is unknown, defaulting to 1000 [ 572.554620][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4279'. [ 572.627417][T22491] netlink: 'syz.3.4280': attribute type 10 has an invalid length. [ 572.639339][T22490] netlink: 'syz.3.4280': attribute type 10 has an invalid length. [ 572.654563][T22491] netlink: 'syz.3.4280': attribute type 10 has an invalid length. [ 572.682771][T22490] dummy0: entered promiscuous mode [ 572.722178][T22490] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 572.888862][T22495] netlink: 'syz.3.4281': attribute type 13 has an invalid length. [ 573.187063][T22456] wg1 speed is unknown, defaulting to 1000 [ 573.314306][ T5831] Bluetooth: hci0: command 0x0405 tx timeout [ 574.084853][T22513] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 574.295112][T22517] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4287'. [ 574.324809][T22517] netlink: Unknown conntrack attr (0) [ 574.346174][T22520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4289'. [ 574.691621][T22546] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 574.753505][T22548] tipc: Enabled bearer , priority 10 [ 574.770936][T22548] syzkaller0: entered promiscuous mode [ 574.779586][T22548] syzkaller0: entered allmulticast mode [ 574.817491][T22548] tipc: Resetting bearer [ 574.859411][T22547] tipc: Resetting bearer [ 574.902754][T22547] tipc: Disabling bearer [ 575.141857][T22558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 575.207563][T22558] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4299'. [ 575.445469][T22572] netlink: 'syz.1.4302': attribute type 10 has an invalid length. [ 575.479688][T22572] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4302'. [ 575.534671][T22576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.741308][T22591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 575.768728][T22591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4308'. [ 575.792590][T22591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 576.181960][T22617] netlink: 'syz.2.4315': attribute type 1 has an invalid length. [ 576.213242][T22612] syzkaller0: entered promiscuous mode [ 576.229121][T22612] syzkaller0: entered allmulticast mode [ 576.250483][T22601] lo speed is unknown, defaulting to 1000 [ 576.344859][T22601] lo speed is unknown, defaulting to 1000 [ 576.577723][T22601] wg1 speed is unknown, defaulting to 1000 [ 576.800876][T22645] netlink: 'syz.4.4321': attribute type 13 has an invalid length. [ 576.879279][T16631] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 576.937962][T22648] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 577.317504][T22662] netlink: 'syz.1.4327': attribute type 20 has an invalid length. [ 577.336957][T20067] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.337227][T22662] netlink: 'syz.1.4327': attribute type 20 has an invalid length. [ 577.367594][T20067] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.396818][T22662] __nla_validate_parse: 3 callbacks suppressed [ 577.396839][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4327'. [ 577.407479][T20067] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.435773][T22681] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4330'. [ 577.448521][T22680] Cannot find del_set index 4 as target [ 577.482779][T22681] 0ªX¹¦À: renamed from caif0 [ 577.496048][T17555] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 577.541976][T22688] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4332'. [ 577.570010][T22681] 0ªX¹¦À: entered allmulticast mode [ 577.592459][T22681] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 577.700768][T22691] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4333'. [ 577.778693][T22699] netlink: 'syz.4.4335': attribute type 2 has an invalid length. [ 577.791974][T22699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4335'. [ 577.935886][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4338'. [ 577.967175][T22711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4338'. [ 577.993334][T22711] netlink: 'syz.0.4338': attribute type 12 has an invalid length. [ 578.021014][T22711] netlink: 'syz.0.4338': attribute type 11 has an invalid length. [ 578.148612][T22718] netlink: 'syz.3.4339': attribute type 61 has an invalid length. [ 578.177941][T22718] netlink: 'syz.3.4339': attribute type 62 has an invalid length. [ 578.220094][T22725] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4341'. [ 578.459944][T22743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.723087][T22765] tipc: Resetting bearer [ 578.750837][T22765] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 578.880092][T22769] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4353'. [ 578.900302][T22777] dvmrp12: entered allmulticast mode [ 578.907325][T22770] dvmrp12: left allmulticast mode [ 579.285775][T22801] IPVS: length: 140 != 8 [ 580.292092][T22847] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4375'. [ 581.075737][T22879] xt_ecn: cannot match TCP bits for non-tcp packets [ 581.082868][T22880] xt_ecn: cannot match TCP bits for non-tcp packets [ 581.217453][T22865] validate_nla: 3 callbacks suppressed [ 581.217472][T22865] netlink: 'syz.4.4380': attribute type 21 has an invalid length. [ 581.579717][T22906] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 581.633190][T22906] netlink: 'syz.2.4391': attribute type 1 has an invalid length. [ 581.645279][T22913] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 581.755764][T22924] batadv0: entered promiscuous mode [ 581.765217][T22924] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 581.842806][T22885] lo speed is unknown, defaulting to 1000 [ 581.863148][T22885] lo speed is unknown, defaulting to 1000 [ 581.869705][T22925] netlink: set zone limit has 4 unknown bytes [ 582.309285][T22885] wg1 speed is unknown, defaulting to 1000 [ 582.334772][T22886] lo speed is unknown, defaulting to 1000 [ 582.371451][T22886] lo speed is unknown, defaulting to 1000 [ 582.807001][T22954] __nla_validate_parse: 5 callbacks suppressed [ 582.807022][T22954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4403'. [ 582.824550][T22954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 582.838151][T22954] netlink: 'syz.2.4403': attribute type 13 has an invalid length. [ 582.858327][T22913] lo speed is unknown, defaulting to 1000 [ 582.867287][T22886] wg1 speed is unknown, defaulting to 1000 [ 582.893167][T22913] lo speed is unknown, defaulting to 1000 [ 583.328686][T22913] wg1 speed is unknown, defaulting to 1000 [ 584.279826][T22966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4406'. [ 584.542848][T22971] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4408'. [ 584.773331][T22988] wlan1 speed is unknown, defaulting to 1000 [ 584.794672][T22988] wlan1 speed is unknown, defaulting to 1000 [ 584.805542][T22988] wlan1 speed is unknown, defaulting to 1000 [ 584.828771][T22988] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 584.866001][T22988] wlan1 speed is unknown, defaulting to 1000 [ 584.876640][T22988] wlan1 speed is unknown, defaulting to 1000 [ 584.885568][T22988] wlan1 speed is unknown, defaulting to 1000 [ 584.894134][T22988] wlan1 speed is unknown, defaulting to 1000 [ 584.903342][T22988] wlan1 speed is unknown, defaulting to 1000 [ 584.912453][T22988] wlan1 speed is unknown, defaulting to 1000 [ 584.923564][T22988] wlan1 speed is unknown, defaulting to 1000 [ 585.445756][T22942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.598472][T23002] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4415'. [ 585.634240][T23002] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4415'. [ 585.866283][T23018] syzkaller1: entered promiscuous mode [ 585.897165][T23018] syzkaller1: entered allmulticast mode [ 586.050824][T23028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4421'. [ 586.072641][T23030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4422'. [ 586.113609][T23030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4422'. [ 586.355037][T23047] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4426'. [ 586.586984][T23061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.663792][T23061] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 586.675778][T23061] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 586.684232][T23061] CPU: 0 UID: 0 PID: 23061 Comm: syz.1.4427 Not tainted syzkaller #0 PREEMPT(full) [ 586.693664][T23061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 586.703770][T23061] RIP: 0010:klist_remove+0x156/0x340 [ 586.709114][T23061] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 3d d2 98 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 1e d2 98 f6 49 8b 44 24 58 48 89 44 24 08 [ 586.728769][T23061] RSP: 0018:ffffc9000ce17960 EFLAGS: 00010202 [ 586.734973][T23061] RAX: 000000000000000b RBX: ffff88804310dac0 RCX: 0000000000000000 [ 586.742997][T23061] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 586.751102][T23061] RBP: ffffc9000ce17a60 R08: ffffffff8ff711e3 R09: 1ffffffff1fee23c [ 586.759129][T23061] R10: dffffc0000000000 R11: fffffbfff1fee23d R12: 0000000000000000 [ 586.767148][T23061] R13: 1ffff1100fbdb10c R14: ffff88807ded8860 R15: dffffc0000000000 [ 586.775168][T23061] FS: 00007f946e26b6c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 586.784138][T23061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.790776][T23061] CR2: 00007f2cef986e80 CR3: 000000005a662000 CR4: 00000000003526f0 [ 586.798804][T23061] Call Trace: [ 586.802119][T23061] [ 586.805074][T23061] ? __pfx_klist_remove+0x10/0x10 [ 586.810133][T23061] ? kobject_move+0x5de/0x720 [ 586.814847][T23061] ? __pfx_kobject_move+0x10/0x10 [ 586.819909][T23061] ? do_raw_spin_unlock+0xf5/0x210 [ 586.825057][T23061] ? get_device_parent+0x366/0x3a0 [ 586.830193][T23061] device_move+0x193/0x730 [ 586.834640][T23061] hci_conn_del_sysfs+0xb8/0x1a0 [ 586.839610][T23061] hci_conn_del+0xc36/0x1230 [ 586.844239][T23061] hci_conn_hash_flush+0x191/0x260 [ 586.849390][T23061] hci_dev_close_sync+0x821/0x10e0 [ 586.854529][T23061] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 586.860150][T23061] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.865476][T23061] ? enable_work+0x1fd/0x230 [ 586.870098][T23061] hci_dev_close+0x108/0x260 [ 586.874713][T23061] sock_do_ioctl+0x101/0x320 [ 586.879332][T23061] ? __pfx_sock_do_ioctl+0x10/0x10 [ 586.884470][T23061] ? do_futex+0x395/0x420 [ 586.888832][T23061] sock_ioctl+0x5c6/0x7f0 [ 586.893194][T23061] ? __pfx_sock_ioctl+0x10/0x10 [ 586.898087][T23061] ? __fget_files+0x2a/0x420 [ 586.902701][T23061] ? __fget_files+0x3a0/0x420 [ 586.907490][T23061] ? __fget_files+0x2a/0x420 [ 586.912113][T23061] ? bpf_lsm_file_ioctl+0x9/0x20 [ 586.917076][T23061] ? __pfx_sock_ioctl+0x10/0x10 [ 586.921962][T23061] __se_sys_ioctl+0xfc/0x170 [ 586.926626][T23061] do_syscall_64+0x14d/0xf80 [ 586.931279][T23061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.937383][T23061] ? trace_irq_disable+0x37/0x100 [ 586.942446][T23061] ? clear_bhb_loop+0x40/0x90 [ 586.947148][T23061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.953069][T23061] RIP: 0033:0x7f946d39bf79 [ 586.957507][T23061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.977225][T23061] RSP: 002b:00007f946e26b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.985945][T23061] RAX: ffffffffffffffda RBX: 00007f946d615fa0 RCX: 00007f946d39bf79 [ 586.993984][T23061] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000009 [ 587.002170][T23061] RBP: 00007f946d4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 587.010168][T23061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.018162][T23061] R13: 00007f946d616038 R14: 00007f946d615fa0 R15: 00007ffe898e48f8 [ 587.026176][T23061] [ 587.029230][T23061] Modules linked in: [ 587.033898][T23061] ---[ end trace 0000000000000000 ]--- [ 587.043446][T23061] RIP: 0010:klist_remove+0x156/0x340 [ 587.048823][T23061] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 3d d2 98 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 1e d2 98 f6 49 8b 44 24 58 48 89 44 24 08 [ 587.073952][T23061] RSP: 0018:ffffc9000ce17960 EFLAGS: 00010202 [ 587.080549][T23061] RAX: 000000000000000b RBX: ffff88804310dac0 RCX: 0000000000000000 [ 587.089319][T23061] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 587.098932][T23061] RBP: ffffc9000ce17a60 R08: ffffffff8ff711e3 R09: 1ffffffff1fee23c [ 587.111724][T23061] R10: dffffc0000000000 R11: fffffbfff1fee23d R12: 0000000000000000 [ 587.121871][T23061] R13: 1ffff1100fbdb10c R14: ffff88807ded8860 R15: dffffc0000000000 [ 587.131306][T23061] FS: 00007f946e26b6c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 587.140576][T23061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.147310][T23061] CR2: 00007f1190471e9c CR3: 000000005a662000 CR4: 00000000003526f0 [ 587.158918][T23061] Kernel panic - not syncing: Fatal exception [ 587.165239][T23061] Kernel Offset: disabled [ 587.169595][T23061] Rebooting in 86400 seconds..