last executing test programs: 13.709218406s ago: executing program 0 (id=3582): socket$netlink(0x10, 0x3, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @remote, [0xff, 0xff, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 'virt_wifi0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x89, 0x7, 0x1, 0x8}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 13.564859018s ago: executing program 0 (id=3583): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x1a6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x62, 0x8914, 'veth0_macvtap\x00', 'nicvf0\x00', 'netpci0\x00', 'gre0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0x80], @remote, [0x0, 0x0, 0x0, 0x0, 0xff, 0x80], 0x6e, 0xe6, 0x116, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0xa, 0x80, 0x3, 0x1, 0x0, "b894d9a9f19ba0aabe714cb3c3d92d2d6ff227cae39515af859c0a08b57378b2fa7130012afde8e7462ad06c8e4320929b1309bafc8bec608514ec18c08db2a9"}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x21e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a, 0x0, 0x0, 0xfffffffa}, 0x28) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r2}) 9.22424013s ago: executing program 3 (id=3615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x40) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x21) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r3}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x88c0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e220800"], 0x5c}}, 0x0) 9.132727678s ago: executing program 3 (id=3616): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x22051, r4, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x500000c, 0x6e073, r1, 0x80000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000080), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18000e0001000080000000005706000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xb, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[r5], &(0x7f0000000280)=[{0x2, 0x3, 0x7, 0xc}, {0x1, 0x3, 0x7, 0x3}, {0xfffffffe, 0x3, 0x5, 0x6}, {0x1, 0x1, 0x1, 0xc}, {0x0, 0x2, 0xf, 0x9}, {0x4, 0x1, 0xc}], 0x10, 0x8}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x5}, 0x0) gettid() 9.005484363s ago: executing program 1 (id=3619): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x2, 0xa}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000009000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000e700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0xb8, 0x6}}}}]}, 0xfeeb}, 0x1, 0x0, 0x0, 0x600400c1}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r10, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0"], 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 8.908329597s ago: executing program 3 (id=3620): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xcb}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000001040)) 8.818346503s ago: executing program 3 (id=3621): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0x0, 0x500}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) 8.601864422s ago: executing program 3 (id=3622): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018910000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r2, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6393}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4111, 0x100f}, {&(0x7f0000000c80)=""/229, 0xe5}], 0x4}, 0x8101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000b80)=""/231, 0xe7}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4087, 0xff7}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000080)=""/105, 0x69}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 6.790633708s ago: executing program 1 (id=3627): socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000004ac0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)="f1", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x629}, 0x1c, &(0x7f0000002300)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000850) recvmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, &(0x7f0000000140)=""/87, 0x57}, 0x2100) 6.730122096s ago: executing program 1 (id=3628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, r5, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x200, 0x153e, 0x6, 0x3, 0x9, 0x6, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x82) close(r3) 6.31027079s ago: executing program 1 (id=3631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0x0, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000400080a080001000000"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x8, 0x10, 0x0, 0x0, 0x1, 0x17}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x8, 0x78180f44b3632515, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0xc005}, 0x40) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x8, 0x7fff}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x8, 0x4, 0x206, 0x3, 0x4bf, 0x8, 0x100, 0x1, r6}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0x13, 0x16, 0xb3, 0x4000007f, 0x20080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) 6.201836843s ago: executing program 4 (id=3633): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r5, 0x7, 0x1ff, 0x400, 0x6, 0x9}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r5, 0x5381}, &(0x7f0000000080)=0x8) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="00030086399b8e361c621b9a75a3d1008b232fd32d6dfc5e4ec6c16ca3e9286c323f562d2c7b53926fa29738b48ebfe089d6714ec325b6", @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf250100000006000a0001000000050007000a00000006000800a0aa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r9}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendmsg$NFC_CMD_ACTIVATE_TARGET(r7, 0x0, 0x40) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xc}, 0x50) r10 = socket(0x10, 0x3, 0x0) connect$netlink(r10, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) 6.086664842s ago: executing program 2 (id=3634): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x20, r3, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="c14d0000000000002000128008000100687372001400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x68}}, 0x0) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000000c0)={&(0x7f00000003c0)=""/4096, 0x1000, 0x7, 0x60000}) (async) r6 = socket(0x2, 0x80805, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x14, r8, 0x327, 0x3}, 0x14}}, 0x0) (async) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0xff, 0x0, 0x2, 0x4}, 0xe) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@remote, @rand_addr=0x64010101, 0x1f, 0xc}}) 5.941805136s ago: executing program 2 (id=3635): syz_emit_ethernet(0x5e, &(0x7f0000002280)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@srh={0x1, 0x4, 0x4, 0x2, 0x80, 0x38, 0x6, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1]}]}}}}}, 0x0) unshare(0x22020600) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000000c0)=0x8000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0xa0000004}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000001f000000710004000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) unshare(0xb938f13343ae1649) 5.273765737s ago: executing program 4 (id=3636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d0304000000fdffffff130000001736f6287e0cfbf80c000980080002008c0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) 5.165261757s ago: executing program 2 (id=3637): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000302109809"], 0xb) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000908a97d7bbd7af1822aea2904ff3660018ff7f000000000000b04b14011695587c34fb868900000003130000010002130800000003041145bc1d2942d78ac0871b10db96378281b2a39e18849a2bcac96a971c1ca2b39d61639d5a3d474f3f0b9b8094ee3c54807c37018a7047b9bf22ffb832f1f4503886"], 0x0, 0x36, 0x0, 0x1, 0x9b2987a6}, 0x28) unshare(0x24060400) unshare(0x2c060000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_all\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r2, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b444a514ac6c71fd5da1ae880000", @ANYRES16=r9, @ANYBLOB="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"], 0x4b4}, 0x1, 0x0, 0x0, 0x40800}, 0x80) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(r7, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)="5fb623d119f3e4da2db9b4553af0677977ea12f6b73b8ff595ab9ed7ff94bae363a6e6ac214704763d6ae69b8ae86ccfc8cee1cb621c7f97ef33c6d82611267c78567544c15d491118cee3ebde4c03cd07fdf428420476d020968bec7c7b0a2be6eecf1d117a", 0x66}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 5.163287187s ago: executing program 4 (id=3638): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}], 0x2e) (async) r1 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000c5b73f5feb000000000061192461614f334b7570fb2ac39bf7dc2b3c256a8e8dc2e0a386c749c66f77bc41258b789139fab67a86a3ffac9f0d0c2314316f054311a489a9edff940d695c35c1fd5074f61e019b20de06ce34e05b7af917f5546087f17759deacc8b07031e2596817a59b2e9f250e55ee1d5a7c665a6b00b465ae5920bc5d6e33e26c7cb24cb2670e87b1377a70680c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@dellink={0xe8, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8a28, 0x2476}, [@IFLA_NET_NS_PID={0x8}, @IFLA_MAP={0x24, 0xe, {0x100, 0x8000000000000001, 0x8001, 0x4, 0x1, 0x4}}, @IFLA_AF_SPEC={0x90, 0x1a, 0x0, 0x1, [@AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x3, 0x0, 0x0, 0x5}, {0x0, 0x3, 0x0, 0x0, 0x9}, {0x0, 0x1f, 0x0, 0x0, 0x3}, {0x0, 0x16, 0x0, 0x0, 0x8}, {0x0, 0x16, 0x0, 0x0, 0x92d7}]}}, @AF_BRIDGE={0x4}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0x51d5da60}]}}, @AF_MPLS={0x4}, @AF_INET6={0x64, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf6}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x2, 0x8, 0x2}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0xe}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @mcast1, 0x1}, 0x1c) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000d042dbd1e480000002000000000", @ANYRES32=r6, @ANYBLOB="04000400000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="0010000100f2c61b0b7c60ed68cfdd7a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000fdffffc67e485b222fdb941ca45e6d774c05c256b79179990136382780cdae7525796c50051217176ce012d38787f56315ba4e9c82776b6de4fc4ec5b0a9c90fd76f9bd4b862b196943978c9f281abc56ea6b02f2cb5df1404d6aa984846264805e1db6345fcda8b6e513e31c5f8e27cf11bf030b07840a1565bf0df8675857eab2677e4367a2141c4f79a6156bfe3c88c9710d858699e87c5f17a0a351f2200"/171], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) (async) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x20000004) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ffdbdf250900020073797a3100000000080041007278650014330073797a5f74756e00"/56], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 4.885640267s ago: executing program 0 (id=3639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000e00)="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", 0x0, 0xfe, 0x60000000}, 0x50) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$inet(0x2, 0x2, 0x3) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r7, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r7, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) accept4(r6, &(0x7f0000000380)=@ax25={{0x3, @rose}, [@null, @bcast, @default, @null, @rose, @bcast, @bcast, @default]}, &(0x7f0000000100)=0x80, 0x80800) (async) r9 = accept4(r6, &(0x7f0000000380)=@ax25={{0x3, @rose}, [@null, @bcast, @default, @null, @rose, @bcast, @bcast, @default]}, &(0x7f0000000100)=0x80, 0x80800) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f00000001c0)=0x8, 0x4) recvmmsg(r8, &(0x7f0000000440), 0x0, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async) recvmmsg(r8, &(0x7f0000000440), 0x0, 0x2000000022, &(0x7f0000000480)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x32, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8}, 0x94) 1.15250611s ago: executing program 2 (id=3640): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1.151965962s ago: executing program 0 (id=3641): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x70bd2e, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xb}]}, 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x3, 0x3, 0x100, 0xffffffffffffffff, 0x9a8b}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r1, 0x100}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x9, 0xfffffffffffffff9}) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'io'}, {0x2b, 'perf_event'}, {0x2b, 'perf_event'}, {0x2d, 'rlimit'}, {0x2b, 'devices'}, {0x2b, 'net_cls'}, {0x2d, 'perf_event'}]}, 0x47) 1.15136448s ago: executing program 4 (id=3642): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="1f18e395312d0af6d99feefe56956f0f", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x5) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000780)=""/265, 0x109}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x13012, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000001b5181170f03722c4994d155f55abda8b4bf181aaf6790652d4a086b4203142005e10c39bbd64d53f104acb4b5adb696a25e836f3d09a0491c2d94ff0b83d72ad777e9d5cab77463473104dcac6c207b67c2fb76fe8de81429304f62aeda520d7c9b321e5957d8eb043dd3f4163ce035671e845ca", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)=0x40000) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000000)=0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x8d, &(0x7f0000000240)=""/141}, 0x94) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x7, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) 1.027850861s ago: executing program 3 (id=3643): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000080)={0x80000002}) sendfile(r4, r5, 0x0, 0xffffffff000) bind$rds(r5, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000c40)=""/86, &(0x7f0000000cc0)=0x56) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0xa, 0x10000000, 0x2, 0x8, 0xc2db, 0xe}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) unshare(0x20020600) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r8, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000a40)={'filter\x00', 0x4}, 0x68) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r9, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000002040)=""/4078, 0xfee}, {&(0x7f00000018c0)=""/181, 0xb5}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000480)=""/120, 0x78}], 0x6}}], 0x1, 0x40000000, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmmsg$sock(r2, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d40)="c48c3ff35a909ee0301e120e95589456b2edddecf7918a5d61ad2652ced6911353778fa239cdae48e551382e63999e4115869abfd7b8cc2b80ba86419c0b147e37fb06e2f1382430f39fac3ece584b568d319835df208c743cecc6baaf39673579682da38742c8e52aea3df91878ca876e85ab7afc65f2b65af2f7e3e5241515bac2ad211ab42c7b42610469928e0c9fd96c28e03138a96573ccba69b666153a6373e6c1c2d66c3e7b97d411500fbdd866eb991a3542294ed482ec5285b267a51699ca970b9fea0a55529e67857677e7e128c816767e4c2e242ac02d5fa16031a708", 0xe2}, {&(0x7f0000000e40)="9d34458439c16500b1a60b77c743b746f86d7ab149a6aa896f6794e477458d77e506295de35b12eb74a0882a3dd99affae33b24a16dd289e4b90de1c678ef2ad68a7c6487d9e29dada82cbdd2935dea641a5eefafc5af90c7c4a17fef92203bcc3c26f7c0ed34bfbd64b2e1c856a2bb73e3fdc410b1502afc4e65afd5d13a51c60d6206eb0b6ae061e5fefcd8962", 0x8e}], 0x2}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001040)="7eb3defaf467079bac142410378dcecc6af9f11fbde96d1d98a7c9f17b01100f342f588fa2f5f6f9bc4bd03599bf14c98af137f9af0bd9cd5cfd58c71970c049b4e23eebfcf7ab93c6c8f130105ec9aa2ab5f1d2013ec704b2839d64c843b2f4b2d2dbda30cb2ef0e8e56fe4b43a6a95b33163bfee4e4e5303ceba20c4d3465b2546e2156e19da9f46850e49bcaefb78b045a8e3edf91360614be335b73aa264f56546f1566dcffd00f4735184bbeafbf2a4886fc03d83fda3ccf09faf536ab90fbb5b78c4bb561f6ffa5319aa5b441b9848da4a0a36a6bd37cd950385859732b3675c2b9c4ba08023a9deecde", 0xed}, {&(0x7f0000001140)="076e12585e8ab0c8dc941d384129f0c387556513cdbe13dc838ec5b86a1f6cec7aaf4b13da14f37bd799dbdfbf71f50446d22794a6ffb2534883e5c309f4cc977ebadad28b08e7ad53ae43b31bbed42a844d9e581364375410bd01c259a77d5f23210b1e1c34a1110692835ae77673030e9d9cb395d7ab05804958af", 0x7c}, {&(0x7f00000011c0)="8a", 0x1}, {&(0x7f0000001200)="f51072f47cc56bd1c26a66a210ab4cfbfaca8e3858a8556c21a53a4b2e3d4d0ff88bec6508c470463ca85d0f2d1fb9faa6728a2d59e59a0d483668e0aedbbca8fd374edb4aae4a9a1edbf4237fdf6ae916e7a544ad5a8628028b24f3f2e34d94f67872ee086986d87cb8f6ec", 0x6c}, {&(0x7f0000001280)="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", 0xff}, {&(0x7f0000001380)="0f53", 0x2}, {&(0x7f00000013c0)="77cf942bb46e9c68e0e3c4c50bd33fb8e9ea23f980c4fcc856cef3a9a1dbf283ef718893e455468d03715153981eefec358a17bb9ed184da3b86844c202b6deb70a84f23ab4a9d0fc422cd27d6f722e2808bd50f7d10844c2ffbd1f1265f61b2d8f3dc5fc8c1ee23226f9f3666f240556083968b7f239583efc8f6e35c9b77b63141c4e851db0fab5e15f614799f", 0x8e}, {&(0x7f00000014c0)="bb88b12594635a4f573dc6920d44c97c5e65f09484b817d2b3c05f0b49bb2956aab57a9f3c59103ef86c5357c4762d0fc6a6211c9a5640914886bf541088cd0e7616d77fc420d38f3f0f293532b4ad8e73b630eeaca74cbee2042f00e09ab5fa553523ac3df5669c8ea29ce8364c262100bd6649bdeeee755cd7a5d4b478f23ae18e556386564ef364b9dac632208cd92ea0b97153054184eb893c1d0d4c7db76335b1771958f7974579761438153caf91b4d16e31fff73b2894f4c3ec61450fce819de69019410543fed74e3f683516e02061e96accafe3b5da80b6", 0xdc}], 0x8}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001800)="31403ae17b94f70bb46dd81b3784336aa4c48418", 0x14}, {0x0}], 0x2}}], 0x4, 0x4) 815.037221ms ago: executing program 0 (id=3644): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x6, 0x0, @void}, 0x10) 610.405465ms ago: executing program 2 (id=3645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0xffffc000) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0), 0x4) 591.462525ms ago: executing program 0 (id=3646): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0xffffff80, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) r3 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001300)=ANY=[@ANYBLOB="e0050000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25030000000800", @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x5e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) sendto$unix(r2, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 426.631984ms ago: executing program 2 (id=3647): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x9}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='task_rename\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 292.439816ms ago: executing program 1 (id=3648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0xfffffffc, 0x2b}, @in6=@private0, {0x0, 0x0, 0x0, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000680)={0xffffffffffffffff, 0x4, 0x3, 0x6, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@RTM_GETNSID={0x14, 0x5a, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, r6, 0x120, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff49}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe68}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe08}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x417}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3d88}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 152.513711ms ago: executing program 4 (id=3649): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3e, 0x3e, 0x7, [@datasec={0x1, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x1, 0xdf5}, {0x2, 0x9, 0x4}, {0x4, 0x6, 0x6}, {0x4, 0x8001, 0x6}], "2685"}]}, {0x0, [0x30, 0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000100)=""/80, 0x5f, 0x50, 0x0, 0x7fff}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000001f80)=ANY=[@ANYRESOCT=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001}, 0x3c) 2.945087ms ago: executing program 1 (id=3650): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r3, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x28}}, 0x2000c050) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000017c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000018c0)=""/259, 0x103}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000001c80)=""/233, 0xe9}, {&(0x7f0000000600)=""/4080, 0xff0}, {&(0x7f0000001bc0)=""/189, 0xbd}, {&(0x7f00000016c0)=""/235, 0xeb}], 0x9}, 0x10001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfff}], 0x3, 0x4022, 0x0) 0s ago: executing program 4 (id=3651): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)={r1}, &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000fd8f71103700000000007e050000000000009500000000000000fc416c5a8a61f6a8c2f8f9e33eb162dbfdbbe1aa12e7b13590b320a94f07c573cc1b3e0cd70f5fc7447ceef08cdc9a8a1245eefd269baf88478a935fce90dea1c860ec50dee308"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)={r1}, &(0x7f0000000180)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000fd8f71103700000000007e050000000000009500000000000000fc416c5a8a61f6a8c2f8f9e33eb162dbfdbbe1aa12e7b13590b320a94f07c573cc1b3e0cd70f5fc7447ceef08cdc9a8a1245eefd269baf88478a935fce90dea1c860ec50dee308"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) kernel console output (not intermixed with test programs): .1.2397'. [ 402.117373][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'. [ 402.620521][T15014] virt_wifi0 speed is unknown, defaulting to 1000 [ 402.630063][T15014] wg1 speed is unknown, defaulting to 1000 [ 402.799967][T15009] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 403.612319][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 403.722447][T15053] virt_wifi0 speed is unknown, defaulting to 1000 [ 403.742684][T15070] team0: left allmulticast mode [ 403.748024][T15070] bridge0: port 1(team0) entered disabled state [ 403.934574][T15053] wg1 speed is unknown, defaulting to 1000 [ 404.033802][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 404.520179][T15104] netlink: 'syz.2.2425': attribute type 1 has an invalid length. [ 404.534052][T15103] tipc: Enabling of bearer rejected, failed to enable media [ 404.877051][T15123] netlink: 'syz.3.2432': attribute type 3 has an invalid length. [ 405.009467][T15133] nbd: socks must be embedded in a SOCK_ITEM attr [ 405.119017][T15140] netlink: 'syz.2.2435': attribute type 12 has an invalid length. [ 405.347146][T15155] netlink: 'syz.3.2441': attribute type 3 has an invalid length. [ 405.435330][T15157] syzkaller1: entered promiscuous mode [ 405.445939][T15157] syzkaller1: entered allmulticast mode [ 405.720362][T15180] netlink: 'syz.4.2447': attribute type 16 has an invalid length. [ 405.728987][T15180] netlink: 'syz.4.2447': attribute type 17 has an invalid length. [ 405.896180][T15182] tipc: Enabling of bearer rejected, failed to enable media [ 406.298339][T15209] netlink: 'syz.0.2454': attribute type 1 has an invalid length. [ 406.317865][T15209] __nla_validate_parse: 8 callbacks suppressed [ 406.317883][T15209] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2454'. [ 406.594352][T15192] virt_wifi0 speed is unknown, defaulting to 1000 [ 406.603466][T15216] netlink: 4684 bytes leftover after parsing attributes in process `syz.4.2456'. [ 406.616429][T15192] wg1 speed is unknown, defaulting to 1000 [ 406.750335][T15228] netlink: 'syz.0.2459': attribute type 1 has an invalid length. [ 406.895651][T15228] bond8: entered promiscuous mode [ 406.901660][T15228] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.059201][T15230] bond8: (slave bridge45): making interface the new active one [ 407.067468][T15230] bridge45: entered promiscuous mode [ 407.075609][T15230] bond8: (slave bridge45): Enslaving as an active interface with an up link [ 407.086893][T15218] virt_wifi0 speed is unknown, defaulting to 1000 [ 407.098209][T15218] wg1 speed is unknown, defaulting to 1000 [ 407.187517][T15230] bond8: (slave bridge46): Enslaving as a backup interface with an up link [ 407.222619][T15230] bond8: (slave bridge47): Enslaving as a backup interface with an up link [ 407.332124][T15230] bond8: (slave bridge48): Enslaving as a backup interface with an up link [ 407.388997][T15230] bond8: (slave bridge49): Enslaving as a backup interface with an up link [ 407.465298][T15230] bond8: (slave bridge50): Enslaving as a backup interface with an up link [ 407.524725][T15230] bond8: (slave bridge51): Enslaving as a backup interface with an up link [ 407.661466][T15230] bond8: (slave bridge52): Enslaving as a backup interface with an up link [ 408.184792][T15264] Bluetooth: MGMT ver 1.23 [ 408.266058][T15250] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 408.274344][T15250] netlink: 'syz.0.2466': attribute type 4 has an invalid length. [ 408.315444][T15250] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2466'. [ 408.338168][T15265] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2466'. [ 408.349717][T15250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2466'. [ 408.427941][T15270] bond9: option updelay: invalid value (18446744073709551607) [ 408.448881][T15270] bond9: option updelay: allowed values 0 - 2147483647 [ 408.460185][T15270] bond9 (unregistering): Released all slaves [ 409.051724][T15310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2482'. [ 409.076575][T15310] team0: Port device geneve0 added [ 409.089774][ T30] audit: type=1800 audit(1760520224.973:7): pid=15287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2475" name="cgroup.controllers" dev="tmpfs" ino=2460 res=0 errno=0 [ 409.133092][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'. [ 409.162960][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2481'. [ 409.192844][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2481'. [ 409.335388][T15293] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.360406][T15293] wg1 speed is unknown, defaulting to 1000 [ 409.679032][T15299] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.689133][T15299] wg1 speed is unknown, defaulting to 1000 [ 409.963371][T15330] wg1: entered allmulticast mode [ 410.271238][ T5831] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 410.271935][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 410.423472][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 410.778012][T15366] validate_nla: 4 callbacks suppressed [ 410.778030][T15366] netlink: 'syz.0.2497': attribute type 3 has an invalid length. [ 410.808520][T15364] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 410.988210][T15379] tipc: Enabled bearer , priority 0 [ 410.997223][T15379] syzkaller0: entered promiscuous mode [ 411.003470][T15379] syzkaller0: entered allmulticast mode [ 411.096068][T15377] tipc: Resetting bearer [ 411.125989][T15377] tipc: Disabling bearer [ 411.183982][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.201102][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.362553][T15391] __nla_validate_parse: 5 callbacks suppressed [ 411.362580][T15391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2506'. [ 411.485659][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 411.496133][T15397] openvswitch: netlink: Flow actions attr not present in new flow. [ 411.629620][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2511'. [ 411.702886][T15406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2510'. [ 411.875291][T15402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2510'. [ 411.986892][T15402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2510'. [ 411.997048][T15398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2507'. [ 412.010085][T15413] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2513'. [ 412.472826][T15420] tipc: Enabling of bearer rejected, failed to enable media [ 412.485179][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'. [ 412.657818][T15423] tipc: Enabled bearer , priority 0 [ 412.691727][T15408] virt_wifi0 speed is unknown, defaulting to 1000 [ 412.699688][T15423] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 412.711349][T15423] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 412.722025][T15423] tipc: Resetting bearer [ 412.731557][T15408] wg1 speed is unknown, defaulting to 1000 [ 412.745949][T15434] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 413.026141][T15442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2523'. [ 413.050988][T15444] netlink: 'syz.4.2525': attribute type 9 has an invalid length. [ 413.059346][T15444] netlink: 'syz.4.2525': attribute type 7 has an invalid length. [ 413.068409][T15444] netlink: 'syz.4.2525': attribute type 8 has an invalid length. [ 413.290011][T15447] netlink: 'syz.1.2524': attribute type 13 has an invalid length. [ 413.429420][T15447] tipc: Resetting bearer [ 413.634842][T15462] netlink: 'syz.4.2528': attribute type 9 has an invalid length. [ 413.715980][ T6874] tipc: Resetting bearer [ 413.722000][ T6356] tipc: Node number set to 1478484348 [ 413.917906][T15473] Bluetooth: hci0: unsupported parameter 512 [ 413.962712][T15473] Bluetooth: hci0: invalid length 11, exp 2 for type 19 [ 414.024369][T15486] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 414.030397][T15486] syzkaller1: linktype set to 6 [ 414.517473][T15486] virt_wifi0 speed is unknown, defaulting to 1000 [ 414.557201][T15486] wg1 speed is unknown, defaulting to 1000 [ 415.443602][T15499] virt_wifi0 speed is unknown, defaulting to 1000 [ 415.492241][T15499] wg1 speed is unknown, defaulting to 1000 [ 415.920123][T15543] netlink: 'syz.0.2550': attribute type 64 has an invalid length. [ 416.085490][T15556] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 416.155691][T15556] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 416.185306][T15556] bond7: (slave vcan0): Error -95 calling set_mac_address [ 416.314117][T15561] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 416.327438][T15561] bond7: (slave vcan0): Error -95 calling set_mac_address [ 416.349240][T15565] 8021q: adding VLAN 0 to HW filter on device bond7 [ 416.483337][T15570] __nla_validate_parse: 12 callbacks suppressed [ 416.483355][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2557'. [ 416.516714][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2557'. [ 416.642275][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'. [ 416.672513][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'. [ 416.713452][T15560] virt_wifi0 speed is unknown, defaulting to 1000 [ 416.713921][T15580] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2560'. [ 416.722381][T15560] wg1 speed is unknown, defaulting to 1000 [ 417.532795][T15614] syzkaller0: entered promiscuous mode [ 417.538599][T15614] syzkaller0: entered allmulticast mode [ 417.612732][T15625] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2571'. [ 417.737500][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2570'. [ 417.749141][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2570'. [ 417.822738][T15626] xt_CT: No such helper "syz1" [ 417.927412][T15639] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 417.935007][T15639] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 417.944590][T15639] tipc: Resetting bearer [ 418.129181][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 418.376307][T15653] veth0_to_bridge: entered promiscuous mode [ 418.411603][T15653] veth0_to_bridge: left promiscuous mode [ 418.441088][T15653] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2577'. [ 418.726896][T15634] virt_wifi0 speed is unknown, defaulting to 1000 [ 418.768871][T15634] wg1 speed is unknown, defaulting to 1000 [ 419.328198][T15689] netlink: 'syz.0.2586': attribute type 1 has an invalid length. [ 419.983058][T15698] virt_wifi0 speed is unknown, defaulting to 1000 [ 419.991973][T15698] wg1 speed is unknown, defaulting to 1000 [ 423.430042][T15720] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 423.464471][T15721] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 423.554342][T15728] __nla_validate_parse: 12 callbacks suppressed [ 423.554362][T15728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2596'. [ 423.621357][T15728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2596'. [ 423.663409][T15728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2596'. [ 424.132419][T15743] tipc: Enabled bearer , priority 0 [ 424.654997][T15742] tipc: Disabling bearer [ 424.868321][T15756] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.893658][T15756] wg1 speed is unknown, defaulting to 1000 [ 424.904496][T15782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2607'. [ 424.996293][T15787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2610'. [ 425.244134][T15791] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 425.265269][T15793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2612'. [ 425.274727][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'. [ 425.274749][T15800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2615'. [ 425.295031][T15794] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 425.306156][T15793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2612'. [ 425.318433][T15793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2612'. [ 425.321285][T15791] bond0: (slave 0!): Releasing backup interface [ 425.373216][T15791] !: left promiscuous mode [ 425.405534][T15791] team0: Port device 0! added [ 425.783348][T15829] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 425.868060][T15831] bond4: left allmulticast mode [ 425.888598][T15831] bridge0: port 1(bond4) entered disabled state [ 426.458305][ T154] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.653586][T15848] virt_wifi0 speed is unknown, defaulting to 1000 [ 426.662552][T15848] wg1 speed is unknown, defaulting to 1000 [ 426.771299][ T154] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.779533][ T154] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.792385][ T154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.034677][T15877] netlink: 'syz.3.2631': attribute type 29 has an invalid length. [ 427.044883][T15871] netlink: 'syz.3.2631': attribute type 29 has an invalid length. [ 427.364884][T15892] bridge8: entered allmulticast mode [ 427.438232][T15894] bridge9: entered allmulticast mode [ 427.680256][T15916] netlink: 'syz.2.2644': attribute type 2 has an invalid length. [ 428.552176][T15954] nbd3: detected capacity change from 0 to 63 [ 428.558811][T15960] block nbd3: NBD_DISCONNECT [ 428.587583][T15960] block nbd3: Disconnected due to user request. [ 428.621749][T15962] __nla_validate_parse: 14 callbacks suppressed [ 428.621771][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2653'. [ 428.649983][T15960] block nbd3: shutting down sockets [ 428.679918][T15954] bond8: entered promiscuous mode [ 428.686912][T15954] bond8: entered allmulticast mode [ 428.693612][T15954] 8021q: adding VLAN 0 to HW filter on device bond8 [ 428.738958][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2653'. [ 428.756851][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 428.802620][T15958] virt_wifi0 speed is unknown, defaulting to 1000 [ 428.816345][T15962] veth1: entered promiscuous mode [ 428.823788][T15958] wg1 speed is unknown, defaulting to 1000 [ 429.034392][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 429.088938][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 429.235278][T15996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2658'. [ 429.252025][T15993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'. [ 429.395447][T15982] bridge0: entered promiscuous mode [ 429.407311][T15982] macsec2: entered allmulticast mode [ 429.413506][T15982] bridge0: entered allmulticast mode [ 429.419878][T15982] bridge0: port 2(macsec2) entered blocking state [ 429.427380][T15982] bridge0: port 2(macsec2) entered disabled state [ 429.439281][T15982] bridge0: left allmulticast mode [ 429.444872][T15982] bridge0: left promiscuous mode [ 429.594094][T15974] virt_wifi0 speed is unknown, defaulting to 1000 [ 429.603387][T15974] wg1 speed is unknown, defaulting to 1000 [ 430.423247][T16034] bridge6: entered promiscuous mode [ 430.428669][T16034] bridge6: entered allmulticast mode [ 430.747029][T16044] bond9: entered allmulticast mode [ 430.757172][T16044] 8021q: adding VLAN 0 to HW filter on device bond9 [ 430.899719][T16056] netlink: 'syz.0.2673': attribute type 10 has an invalid length. [ 431.069480][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 431.282122][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2675'. [ 431.366965][T16078] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2679'. [ 431.417748][T16078] xt_TCPMSS: Only works on TCP SYN packets [ 431.621336][T16077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.638602][T16084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.660144][T16071] virt_wifi0 speed is unknown, defaulting to 1000 [ 431.668905][T16071] wg1 speed is unknown, defaulting to 1000 [ 432.188288][T16103] netlink: 'syz.3.2686': attribute type 1 has an invalid length. [ 432.832216][T16121] bridge_slave_1: left allmulticast mode [ 432.869682][T16121] bridge_slave_1: left promiscuous mode [ 432.898728][T16121] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.953626][T16144] netlink: 'syz.4.2697': attribute type 1 has an invalid length. [ 432.975544][T16121] bridge_slave_0: left allmulticast mode [ 432.981931][T16121] bridge_slave_0: left promiscuous mode [ 432.995296][T16121] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.103224][T16137] tipc: Enabled bearer , priority 0 [ 433.125854][T16140] syzkaller0: entered promiscuous mode [ 433.132437][T16140] syzkaller0: entered allmulticast mode [ 433.184782][T16147] bond9: entered promiscuous mode [ 433.201993][T16147] bond9: entered allmulticast mode [ 433.216446][T16147] 8021q: adding VLAN 0 to HW filter on device bond9 [ 433.228044][T16130] pim6reg1: entered promiscuous mode [ 433.233566][T16130] pim6reg1: entered allmulticast mode [ 433.321849][T16133] tipc: Resetting bearer [ 433.329708][T16127] tipc: Resetting bearer [ 433.418149][T16157] lo: Caught tx_queue_len zero misconfig [ 433.441299][T16157] netlink: 'syz.1.2699': attribute type 14 has an invalid length. [ 433.499294][T16159] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 433.635116][T16171] tipc: Enabling of bearer rejected, failed to enable media [ 433.646036][T16172] __nla_validate_parse: 7 callbacks suppressed [ 433.646054][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2703'. [ 433.737234][T16151] virt_wifi0 speed is unknown, defaulting to 1000 [ 433.745650][T16151] wg1 speed is unknown, defaulting to 1000 [ 434.180801][ T6356] tipc: Node number set to 3786023484 [ 434.245051][ T13] tipc: Resetting bearer [ 434.410906][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2713'. [ 434.493697][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'. [ 434.661566][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'. [ 435.507786][T16239] virt_wifi0 speed is unknown, defaulting to 1000 [ 435.518260][T16239] wg1 speed is unknown, defaulting to 1000 [ 435.594957][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'. [ 435.622263][T16227] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 435.730633][T16259] syzkaller1: entered promiscuous mode [ 435.786391][T16259] syzkaller1: entered allmulticast mode [ 435.917935][T16267] netlink: 'syz.1.2730': attribute type 2 has an invalid length. [ 435.927902][T16267] netlink: 'syz.1.2730': attribute type 1 has an invalid length. [ 435.938147][T16267] netlink: 'syz.1.2730': attribute type 1 has an invalid length. [ 436.003157][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2729'. [ 436.013393][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2729'. [ 436.013431][T16265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2729'. [ 436.059818][T16269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2728'. [ 436.089309][T16269] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2728'. [ 436.966457][T16316] syzkaller1: entered promiscuous mode [ 436.980146][T16316] syzkaller1: entered allmulticast mode [ 437.141903][T16283] virt_wifi0 speed is unknown, defaulting to 1000 [ 437.162574][T16283] wg1 speed is unknown, defaulting to 1000 [ 437.657196][T16335] netlink: 'syz.4.2749': attribute type 6 has an invalid length. [ 437.763343][T16339] A link change request failed with some changes committed already. Interface 77ÿ may have been left with an inconsistent configuration, please check. [ 438.176373][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.186261][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.197106][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.210577][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.221977][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.050469][T16361] virt_wifi0 speed is unknown, defaulting to 1000 [ 439.157206][T16371] 8021q: adding VLAN 0 to HW filter on device bond9 [ 439.171169][T16361] wg1 speed is unknown, defaulting to 1000 [ 439.482803][T16361] chnl_net:caif_netlink_parms(): no params data found [ 439.814171][T16397] 8021q: adding VLAN 0 to HW filter on device bond10 [ 439.831628][T16401] macvlan2: entered promiscuous mode [ 439.837090][T16401] macvlan2: entered allmulticast mode [ 439.844773][T16401] bond10: entered promiscuous mode [ 439.851136][T16401] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 439.861764][T16401] bond10: left promiscuous mode [ 439.882899][T16393] __nla_validate_parse: 15 callbacks suppressed [ 439.882912][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2763'. [ 439.930259][T16408] tipc: Enabled bearer , priority 0 [ 440.058707][T16408] tipc: Disabling bearer [ 440.247386][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.261652][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.286639][T16361] bridge_slave_0: entered allmulticast mode [ 440.311939][T16361] bridge_slave_0: entered promiscuous mode [ 440.327260][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.351908][ T5827] Bluetooth: hci2: command tx timeout [ 440.361119][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.378652][T16361] bridge_slave_1: entered allmulticast mode [ 440.398850][T16361] bridge_slave_1: entered promiscuous mode [ 440.562469][T16361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.585692][T16361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.715805][T16361] team0: Port device team_slave_0 added [ 440.728520][T16442] netlink: 'syz.1.2778': attribute type 2 has an invalid length. [ 440.738717][T16361] team0: Port device team_slave_1 added [ 440.750129][T16442] netlink: 'syz.1.2778': attribute type 1 has an invalid length. [ 440.781849][T16442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2778'. [ 440.825657][T16361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.834812][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.879057][T16361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.916777][T16361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.931734][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.969457][T16361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.318311][T16466] netlink: 'syz.1.2784': attribute type 1 has an invalid length. [ 441.329581][T16466] netlink: 'syz.1.2784': attribute type 2 has an invalid length. [ 441.972578][ T154] .` (unregistering): Released all slaves [ 441.985648][ T154] bond1 (unregistering): Released all slaves [ 442.080668][ T154] bond2 (unregistering): Released all slaves [ 442.178500][ T154] bond3 (unregistering): Released all slaves [ 442.192695][ T154] bond4 (unregistering): Released all slaves [ 442.207139][ T154] bond5 (unregistering): Released all slaves [ 442.315024][ T154] bond6 (unregistering): Released all slaves [ 442.419545][ T154] bond0 (unregistering): Released all slaves [ 442.430927][ T5827] Bluetooth: hci2: command tx timeout [ 442.515433][ T154] bond7 (unregistering): Released all slaves [ 442.612106][ T154] bond8 (unregistering): Released all slaves [ 442.629541][T16420] virt_wifi0 speed is unknown, defaulting to 1000 [ 442.757736][T16420] wg1 speed is unknown, defaulting to 1000 [ 442.765856][T16474] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2786'. [ 442.805509][T16361] hsr_slave_0: entered promiscuous mode [ 442.845461][T16361] hsr_slave_1: entered promiscuous mode [ 442.863185][T16361] debugfs: 'hsr0' already exists in 'hsr' [ 442.868959][T16361] Cannot create hsr debugfs directory [ 442.887085][ T154] tipc: Disabling bearer [ 442.901872][ T154] tipc: Disabling bearer [ 442.932593][ T154] tipc: Left network mode [ 443.121352][T16436] virt_wifi0 speed is unknown, defaulting to 1000 [ 443.206521][T16436] wg1 speed is unknown, defaulting to 1000 [ 443.449239][T16480] virt_wifi0 speed is unknown, defaulting to 1000 [ 443.490128][T16480] wg1 speed is unknown, defaulting to 1000 [ 443.860280][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 444.511047][ T5827] Bluetooth: hci2: command tx timeout [ 444.640483][T16504] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2796'. [ 444.655572][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 444.848393][ T154] pim6reg99999999 (unregistering): left allmulticast mode [ 445.090014][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 445.169095][T16527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2802'. [ 445.178748][T16527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2802'. [ 445.903989][T16533] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2803'. [ 445.915132][T16533] sctp: [Deprecated]: syz.1.2803 (pid 16533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.915132][T16533] Use struct sctp_sack_info instead [ 446.038637][T16528] ip6tnl3: entered promiscuous mode [ 446.062344][T16528] ip6tnl3: entered allmulticast mode [ 446.071945][T16528] team0: Device ip6tnl3 is up. Set it down before adding it as a team port [ 446.160632][T16361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.223100][T16361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.285946][T16361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.371330][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2806'. [ 446.393030][T16361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.591525][ T5827] Bluetooth: hci2: command tx timeout [ 446.682404][ T154] IPVS: stop unused estimator thread 0... [ 446.758053][T16535] wg1 speed is unknown, defaulting to 1000 [ 446.815137][T16361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.985589][T16545] wg1 speed is unknown, defaulting to 1000 [ 447.009292][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.120348][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.127640][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.184731][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.192086][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.327073][T16550] wg1 speed is unknown, defaulting to 1000 [ 447.507565][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2813'. [ 447.639458][T16578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2813'. [ 447.750088][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2813'. [ 447.890463][T16583] syzkaller1: entered promiscuous mode [ 447.896240][T16583] syzkaller1: entered allmulticast mode [ 448.069671][T16361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.266878][T16590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2817'. [ 448.278446][T16361] veth0_vlan: entered promiscuous mode [ 448.285149][T16590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2817'. [ 448.316710][T16361] veth1_vlan: entered promiscuous mode [ 448.435792][T16597] netlink: 'syz.2.2820': attribute type 20 has an invalid length. [ 448.479798][T16361] veth0_macvtap: entered promiscuous mode [ 448.507104][T16361] veth1_macvtap: entered promiscuous mode [ 448.593383][T16361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.615997][T16610] tipc: Resetting bearer [ 448.656642][T16361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.669952][T16610] tipc: Enabling of bearer rejected, already enabled [ 448.698779][ T6874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.737833][ T6874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.790829][ T6874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.799696][ T6874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.897465][T16621] tipc: Resetting bearer [ 448.965720][T16633] IPv6: sit5: Disabled Multicast RS [ 449.002643][ T6874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.026494][ T6874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.043017][ T50] tipc: Resetting bearer [ 449.081129][T16637] netlink: 'syz.1.2831': attribute type 21 has an invalid length. [ 449.096852][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.126218][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.680497][T16665] netlink: 'syz.1.2838': attribute type 21 has an invalid length. [ 449.739446][T16665] netlink: 'syz.1.2838': attribute type 21 has an invalid length. [ 449.751259][ T6874] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.780917][ T6874] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.795723][ T6874] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.815730][ T6874] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.828921][T16673] xt_connbytes: Forcing CT accounting to be enabled [ 450.242088][T16640] wg1 speed is unknown, defaulting to 1000 [ 450.350981][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 450.636608][T16686] kthread_run failed with err -4 [ 450.822890][T16692] pimreg: entered allmulticast mode [ 451.198499][T16656] wg1 speed is unknown, defaulting to 1000 [ 451.213543][T16677] wg1 speed is unknown, defaulting to 1000 [ 452.149267][T16703] syzkaller1: entered promiscuous mode [ 452.166670][T16703] syzkaller1: entered allmulticast mode [ 452.381395][T16706] netlink: 'syz.4.2847': attribute type 1 has an invalid length. [ 452.466782][T16706] bond10: entered promiscuous mode [ 452.489246][T16706] 8021q: adding VLAN 0 to HW filter on device bond10 [ 453.177070][T16725] wg1 speed is unknown, defaulting to 1000 [ 453.646341][T16745] __nla_validate_parse: 12 callbacks suppressed [ 453.646361][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2856'. [ 453.745548][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2856'. [ 453.755468][T16745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2856'. [ 453.818061][T16735] wg1 speed is unknown, defaulting to 1000 [ 454.213881][T16740] wg1 speed is unknown, defaulting to 1000 [ 454.568272][T16765] tipc: Enabled bearer , priority 0 [ 454.666842][T16770] syzkaller0: entered promiscuous mode [ 454.736793][T16770] syzkaller0: entered allmulticast mode [ 454.939631][T16760] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 455.012435][T16750] tipc: Resetting bearer [ 455.083646][T16750] tipc: Disabling bearer [ 455.724447][T16764] wg1 speed is unknown, defaulting to 1000 [ 455.895346][T16787] tipc: Enabled bearer , priority 0 [ 455.904120][T16787] syzkaller0: entered promiscuous mode [ 455.909616][T16787] syzkaller0: entered allmulticast mode [ 455.943916][T16787] tipc: Resetting bearer [ 456.041395][T16786] tipc: Resetting bearer [ 456.067229][T16786] tipc: Disabling bearer [ 456.136165][T16778] wg1 speed is unknown, defaulting to 1000 [ 456.176249][T16763] wg1 speed is unknown, defaulting to 1000 [ 456.314215][T16790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2867'. [ 456.358413][T16789] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.525852][T16789] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.664120][T16789] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.799966][T16789] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.878810][T16792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2868'. [ 456.896584][T16792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2868'. [ 456.918572][T16792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2868'. [ 457.124275][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.144537][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.176666][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.235951][ T6876] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.350966][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 457.370398][T16816] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 457.549240][T16802] wg1 speed is unknown, defaulting to 1000 [ 457.597390][T16821] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 457.935069][T16835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2881'. [ 457.972240][T16835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2881'. [ 458.297686][T16810] wg1 speed is unknown, defaulting to 1000 [ 458.627974][T16862] pim6reg: entered allmulticast mode [ 458.640406][T16861] pim6reg: left allmulticast mode [ 458.735318][T16861] tipc: Enabled bearer , priority 0 [ 458.832489][T16861] syzkaller0: entered promiscuous mode [ 458.838116][T16861] syzkaller0: entered allmulticast mode [ 459.870821][ T6353] tipc: Node number set to 2094243229 [ 460.275311][ T5831] Bluetooth: hci2: command 0x0405 tx timeout [ 460.501288][T16860] tipc: Resetting bearer [ 460.631734][T16860] tipc: Disabling bearer [ 460.645958][T16882] __nla_validate_parse: 2 callbacks suppressed [ 460.645977][T16882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2895'. [ 460.662340][T16882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2895'. [ 460.671902][T16882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2895'. [ 460.819569][T16888] syzkaller1: entered promiscuous mode [ 460.830273][T16888] syzkaller1: entered allmulticast mode [ 460.878962][T16893] xt_l2tp: unknown flags: 51 [ 461.438240][T16931] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2906'. [ 461.609649][T16943] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2909'. [ 461.767989][T16948] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 461.780644][T16948] bond10 (unregistering): Released all slaves [ 462.256810][T16978] syzkaller1: entered promiscuous mode [ 462.271767][T16978] syzkaller1: entered allmulticast mode [ 462.399238][T16997] netlink: 'syz.3.2921': attribute type 8 has an invalid length. [ 462.631247][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 462.717824][T17008] tipc: Enabling of bearer rejected, already enabled [ 462.772545][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'. [ 463.073165][T17027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2926'. [ 463.097204][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2927'. [ 463.159777][T17029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2927'. [ 463.279730][T17028] 8021q: adding VLAN 0 to HW filter on device bond11 [ 463.685677][T17055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.750648][T17055] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.775109][T17055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.984851][T17073] tipc: Enabled bearer , priority 0 [ 464.011598][T17074] syzkaller0: entered promiscuous mode [ 464.017105][T17074] syzkaller0: entered allmulticast mode [ 464.113833][T17073] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 464.219824][T17081] syzkaller0: entered promiscuous mode [ 464.237671][T17081] syzkaller0: entered allmulticast mode [ 464.255088][T17073] tipc: Resetting bearer [ 465.922909][T17072] tipc: Resetting bearer [ 465.980902][T17072] tipc: Disabling bearer [ 466.099553][T17123] __nla_validate_parse: 18 callbacks suppressed [ 466.099571][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2948'. [ 466.136457][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2948'. [ 466.159446][T17125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2950'. [ 466.174368][T17132] netlink: 'syz.4.2951': attribute type 39 has an invalid length. [ 466.174411][T17125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2950'. [ 466.191690][T17125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2950'. [ 466.779465][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2958'. [ 466.782475][T17148] wg1 speed is unknown, defaulting to 1000 [ 467.493748][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.517442][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.526345][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.536185][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.545047][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.865472][T17186] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2965'. [ 468.097511][T17199] syz.3.2968 uses old SIOCAX25GETINFO [ 468.240952][T17204] netlink: 'syz.1.2969': attribute type 12 has an invalid length. [ 468.250800][T17208] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2970'. [ 468.270188][T17204] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2969'. [ 468.286391][T17208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2970'. [ 468.512737][T17180] wg1 speed is unknown, defaulting to 1000 [ 469.243172][T17230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.321482][T17230] bond0: (slave rose0): Enslaving as an active interface with an up link [ 469.349399][T17180] chnl_net:caif_netlink_parms(): no params data found [ 469.642019][ T5831] Bluetooth: hci5: command tx timeout [ 469.973724][T17180] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.990914][T17180] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.004350][T17180] bridge_slave_0: entered allmulticast mode [ 470.025271][T17180] bridge_slave_0: entered promiscuous mode [ 470.076445][T17180] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.092458][T17180] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.107625][T17180] bridge_slave_1: entered allmulticast mode [ 470.122668][T17180] bridge_slave_1: entered promiscuous mode [ 470.139817][T17267] netlink: 'syz.1.2979': attribute type 10 has an invalid length. [ 470.172774][T17271] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 470.458991][T17180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.530387][T17180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.756688][T17274] wg1 speed is unknown, defaulting to 1000 [ 471.202575][T17180] team0: Port device team_slave_0 added [ 471.236629][T17315] netlink: 'syz.1.2989': attribute type 1 has an invalid length. [ 471.255033][T17180] team0: Port device team_slave_1 added [ 471.715154][ T5831] Bluetooth: hci5: command tx timeout [ 472.572234][T17318] bond11: (slave veth5): Enslaving as an active interface with a down link [ 472.664385][T17327] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 472.666882][T17329] tipc: Enabling of bearer rejected, already enabled [ 472.705068][T17332] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 472.721239][T17332] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 472.729892][T17332] tipc: Resetting bearer [ 472.806703][T17180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.822827][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.890735][T17180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.914130][T17180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.930763][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.957043][T17180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.228723][T17180] hsr_slave_0: entered promiscuous mode [ 473.236629][T17180] hsr_slave_1: entered promiscuous mode [ 473.245683][T17180] debugfs: 'hsr0' already exists in 'hsr' [ 473.256696][T17180] Cannot create hsr debugfs directory [ 473.339194][T17375] __nla_validate_parse: 1 callbacks suppressed [ 473.339215][T17375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2998'. [ 473.438818][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2998'. [ 473.495228][T17376] can: request_module (can-proto-0) failed. [ 473.671600][T17180] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.693223][T17180] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 473.714873][T17180] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.796309][ T5831] Bluetooth: hci5: command tx timeout [ 473.893766][T17367] wg1 speed is unknown, defaulting to 1000 [ 474.005540][T17180] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.016892][T17180] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 474.037819][T17180] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 474.126795][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'. [ 474.143700][T17180] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.181778][T17180] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 474.208194][T17180] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 474.236654][T17389] pim6reg: entered allmulticast mode [ 474.290427][T17389] pim6reg: left allmulticast mode [ 474.511863][T17180] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.534787][T17180] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 474.558451][T17180] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 474.861256][T17402] syzkaller1: entered promiscuous mode [ 474.873317][T17402] syzkaller1: entered allmulticast mode [ 474.895185][T17180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.926951][T17180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 475.012222][T17180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 475.035630][T17180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 475.164942][T17388] wg1 speed is unknown, defaulting to 1000 [ 475.588598][T17180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.632146][T17180] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.656295][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.663547][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.717830][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.725115][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.871269][ T5831] Bluetooth: hci5: command tx timeout [ 475.949637][T17429] netlink: 'syz.0.3011': attribute type 7 has an invalid length. [ 476.186607][T17413] wg1 speed is unknown, defaulting to 1000 [ 476.388303][T17447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3016'. [ 476.496080][T17414] ip6gre2: entered allmulticast mode [ 476.569855][T17447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3016'. [ 476.813991][T17180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.063727][T17180] veth0_vlan: entered promiscuous mode [ 477.097429][T17180] veth1_vlan: entered promiscuous mode [ 477.223814][T17180] veth0_macvtap: entered promiscuous mode [ 477.269587][T17467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3021'. [ 477.282191][T17467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3021'. [ 477.301565][T17180] veth1_macvtap: entered promiscuous mode [ 477.474662][T17474] FAULT_INJECTION: forcing a failure. [ 477.474662][T17474] name failslab, interval 1, probability 0, space 0, times 0 [ 477.512407][T17474] CPU: 1 UID: 0 PID: 17474 Comm: syz.3.3024 Not tainted syzkaller #0 PREEMPT(full) [ 477.512436][T17474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 477.512448][T17474] Call Trace: [ 477.512456][T17474] [ 477.512465][T17474] dump_stack_lvl+0x189/0x250 [ 477.512492][T17474] ? __pfx____ratelimit+0x10/0x10 [ 477.512515][T17474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.512536][T17474] ? __pfx__printk+0x10/0x10 [ 477.512561][T17474] ? __pfx___might_resched+0x10/0x10 [ 477.512580][T17474] ? fs_reclaim_acquire+0x7d/0x100 [ 477.512614][T17474] should_fail_ex+0x414/0x560 [ 477.512643][T17474] should_failslab+0xa8/0x100 [ 477.512663][T17474] kmem_cache_alloc_node_noprof+0x77/0x710 [ 477.512690][T17474] ? __alloc_skb+0x112/0x2d0 [ 477.512708][T17474] ? netlink_autobind+0xdb/0x300 [ 477.512735][T17474] __alloc_skb+0x112/0x2d0 [ 477.512759][T17474] netlink_sendmsg+0x5c6/0xb30 [ 477.512790][T17474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.512815][T17474] ? aa_sock_msg_perm+0xf1/0x1d0 [ 477.512843][T17474] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.512861][T17474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.512883][T17474] __sock_sendmsg+0x21c/0x270 [ 477.512915][T17474] ____sys_sendmsg+0x505/0x830 [ 477.512944][T17474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.512977][T17474] ? import_iovec+0x74/0xa0 [ 477.513000][T17474] ___sys_sendmsg+0x21f/0x2a0 [ 477.513025][T17474] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.513087][T17474] ? __fget_files+0x2a/0x420 [ 477.513104][T17474] ? __fget_files+0x3a0/0x420 [ 477.513133][T17474] __x64_sys_sendmsg+0x19b/0x260 [ 477.513159][T17474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.513192][T17474] ? __pfx_ksys_write+0x10/0x10 [ 477.513223][T17474] ? do_syscall_64+0xbe/0xfa0 [ 477.513251][T17474] do_syscall_64+0xfa/0xfa0 [ 477.513279][T17474] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.513302][T17474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.513321][T17474] ? clear_bhb_loop+0x60/0xb0 [ 477.513345][T17474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.513363][T17474] RIP: 0033:0x7fc20b98eec9 [ 477.513382][T17474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.513399][T17474] RSP: 002b:00007fc20c7c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.513421][T17474] RAX: ffffffffffffffda RBX: 00007fc20bbe5fa0 RCX: 00007fc20b98eec9 [ 477.513435][T17474] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 477.513448][T17474] RBP: 00007fc20c7c8090 R08: 0000000000000000 R09: 0000000000000000 [ 477.513460][T17474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.513471][T17474] R13: 00007fc20bbe6038 R14: 00007fc20bbe5fa0 R15: 00007fff45d3b938 [ 477.513506][T17474] [ 477.517191][T17460] wg1 speed is unknown, defaulting to 1000 [ 477.550562][T17478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3025'. [ 477.583599][T17180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.834973][T17180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.927198][ T6876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.025632][ T6876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.036775][ T6876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.062462][ T6876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.179891][T17492] netlink: 'syz.1.3028': attribute type 5 has an invalid length. [ 478.347516][T17482] wg1 speed is unknown, defaulting to 1000 [ 478.363769][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.382777][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.619862][ T6875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.639329][ T6875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.872141][T17504] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 478.890172][T17504] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2961'. [ 478.910244][T17504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2961'. [ 479.014741][T17494] wg1 speed is unknown, defaulting to 1000 [ 479.102808][T17509] netlink: 'syz.0.3032': attribute type 1 has an invalid length. [ 479.108501][T17506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3031'. [ 479.112780][T17509] netlink: 'syz.0.3032': attribute type 1 has an invalid length. [ 479.124156][T17506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3031'. [ 479.147811][T17506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3031'. [ 479.295309][T17511] nbd: nbd0 already in use [ 479.302140][T17511] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3032'. [ 479.768997][ T5824] bond0: (slave syz_tun): Releasing backup interface [ 479.778730][ T5824] syz_tun (unregistering): left promiscuous mode [ 479.903137][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 479.927692][ T6875] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.981589][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.993954][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 480.002888][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 480.011710][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 480.021436][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 480.023948][T17523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3037'. [ 480.135405][ T6875] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.240213][ T6875] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.333390][ T6875] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.442945][T17533] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.3040'. [ 480.468876][T17533] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 480.495445][T17524] wg1 speed is unknown, defaulting to 1000 [ 480.498942][T17535] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 480.525737][T17535] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 480.548333][T17535] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 480.562705][T17535] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 480.848977][ T6875] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 480.876862][T17554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3043'. [ 481.246611][ T6875] bond1 (unregistering): (slave gretap1): Releasing active interface [ 481.348893][ T6875] dvmrp0 (unregistering): left allmulticast mode [ 481.398764][ T6875] team0: Port device geneve0 removed [ 481.429403][ T6875] bond1 (unregistering): (slave bridge0): Releasing active interface [ 481.824181][ T6875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.834109][ T6875] bond_slave_0: left promiscuous mode [ 481.841293][ T6875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.850393][ T6875] bond_slave_1: left promiscuous mode [ 481.857139][ T6875] bond0 (unregistering): Released all slaves [ 481.870538][ T6875] bond1 (unregistering): Released all slaves [ 481.883866][ T6875] bond2 (unregistering): Released all slaves [ 481.897996][ T6875] bond3 (unregistering): Released all slaves [ 481.915418][ T6875] bond4 (unregistering): Released all slaves [ 482.022200][ T6875] bond5 (unregistering): Released all slaves [ 482.115286][ T5827] Bluetooth: hci0: command tx timeout [ 482.175705][ T6875] bond6 (unregistering): Released all slaves [ 482.347992][ T5878] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 482.377411][ T5878] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 482.414172][ T5878] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 482.444695][ T6875] bond7 (unregistering): Released all slaves [ 482.639708][ T6875] bond8 (unregistering): (slave veth1): Releasing backup interface [ 482.652509][ T6875] bond8 (unregistering): Released all slaves [ 482.674173][ T6875] bond9 (unregistering): Released all slaves [ 482.822563][ T6875] bond10 (unregistering): Released all slaves [ 482.846790][ T6875] bond11 (unregistering): (slave veth5): Releasing active interface [ 482.862421][ T6875] bond11 (unregistering): Released all slaves [ 482.895564][T17543] dvmrp8: entered allmulticast mode [ 483.414428][T17551] wg1 speed is unknown, defaulting to 1000 [ 483.428309][T17524] chnl_net:caif_netlink_parms(): no params data found [ 483.685087][T17524] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.704291][T17524] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.712524][T17524] bridge_slave_0: entered allmulticast mode [ 483.733241][T17524] bridge_slave_0: entered promiscuous mode [ 483.750383][T17524] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.770955][T17524] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.778327][T17524] bridge_slave_1: entered allmulticast mode [ 483.800115][T17524] bridge_slave_1: entered promiscuous mode [ 484.040475][T17524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.113339][T17524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.191563][ T5827] Bluetooth: hci0: command tx timeout [ 484.246306][T17524] team0: Port device team_slave_0 added [ 484.255365][T17626] __nla_validate_parse: 2 callbacks suppressed [ 484.255383][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3058'. [ 484.272667][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3058'. [ 484.312195][T17626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3058'. [ 484.355139][T17524] team0: Port device team_slave_1 added [ 484.509725][T17524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.532029][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.567179][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 484.568548][T17524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.704338][T17637] syzkaller0: entered promiscuous mode [ 484.709856][T17637] syzkaller0: entered allmulticast mode [ 484.764325][T17524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.779436][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.817042][T17524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.891845][ T6875] tipc: Disabling bearer [ 484.918387][ T6875] tipc: Left network mode [ 484.994263][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3062'. [ 485.022494][T17651] netlink: 'syz.2.3062': attribute type 1 has an invalid length. [ 485.030367][T17651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3062'. [ 486.285316][ T5827] Bluetooth: hci0: command tx timeout [ 486.901352][T17524] hsr_slave_0: entered promiscuous mode [ 486.909323][T17524] hsr_slave_1: entered promiscuous mode [ 486.943371][T17524] debugfs: 'hsr0' already exists in 'hsr' [ 486.957583][T17524] Cannot create hsr debugfs directory [ 486.984909][T17679] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3069'. [ 487.065736][T17683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3070'. [ 487.077599][T17683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3070'. [ 487.099247][T17683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3070'. [ 487.342203][T17661] wg1 speed is unknown, defaulting to 1000 [ 487.449912][T17698] Bluetooth: MGMT ver 1.23 [ 487.729951][T17711] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 487.769091][T17710] tc_dump_action: action bad kind [ 488.351536][ T5827] Bluetooth: hci0: command tx timeout [ 488.624596][T17524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.648105][T17524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 488.666881][T17524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.703721][T17524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 488.727779][T17704] wg1 speed is unknown, defaulting to 1000 [ 488.787535][T17707] wg1 speed is unknown, defaulting to 1000 [ 488.869912][T17734] sctp: [Deprecated]: syz.0.3084 (pid 17734) Use of int in max_burst socket option deprecated. [ 488.869912][T17734] Use struct sctp_assoc_value instead [ 489.044786][ T6875] hsr_slave_0: left promiscuous mode [ 489.051021][ T6875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.059647][ T6875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.067795][ T6875] batman_adv: batadv0: Removing interface: vlan3 [ 489.141744][T17739] netlink: 'syz.2.3085': attribute type 30 has an invalid length. [ 489.167863][ T6875] pimreg (unregistering): left allmulticast mode [ 489.482298][ T6875] team0 (unregistering): Port device team_slave_1 removed [ 489.519318][ T6875] team0 (unregistering): Port device team_slave_0 removed [ 489.528035][ T6870] smc: removing ib device syz2 [ 490.208005][T17524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.246389][T17743] __nla_validate_parse: 10 callbacks suppressed [ 490.246408][T17743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3087'. [ 490.288135][T17524] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.351967][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.359140][ T6874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.382567][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.389785][ T6874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.197003][T17524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.347638][T17524] veth0_vlan: entered promiscuous mode [ 491.386762][T17524] veth1_vlan: entered promiscuous mode [ 491.429777][T17524] veth0_macvtap: entered promiscuous mode [ 491.443740][T17524] veth1_macvtap: entered promiscuous mode [ 491.496035][T17524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.515874][T17524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.534674][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.553802][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.613901][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.657456][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.822962][T17766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3091'. [ 491.832923][T17766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3091'. [ 491.864043][T17766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3091'. [ 491.911284][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.919142][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.076261][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.085491][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.262530][T17776] netem: change failed [ 492.322133][T17777] sctp: [Deprecated]: syz.1.3033 (pid 17777) Use of int in max_burst socket option deprecated. [ 492.322133][T17777] Use struct sctp_assoc_value instead [ 492.533454][ T6875] IPVS: stop unused estimator thread 0... [ 492.583726][T17780] netlink: 'syz.2.3094': attribute type 39 has an invalid length. [ 492.610236][T17780] veth0_macvtap: left promiscuous mode [ 492.921124][T17787] IPv6: addrconf: prefix option has invalid lifetime [ 493.440236][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 493.450261][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 493.462690][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 493.482008][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 493.490278][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 493.569957][T17810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3102'. [ 493.579816][T17810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3102'. [ 493.623486][T17810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3102'. [ 494.188357][T17833] tipc: Started in network mode [ 494.194016][T17833] tipc: Node identity , cluster identity 4711 [ 494.200226][T17833] tipc: Failed to obtain node identity [ 494.206363][T17833] tipc: Enabling of bearer rejected, failed to enable media [ 494.220067][T17833] syzkaller0: entered promiscuous mode [ 494.226174][T17833] syzkaller0: entered allmulticast mode [ 494.317892][T17807] chnl_net:caif_netlink_parms(): no params data found [ 494.335867][T17841] netlink: 'syz.3.3111': attribute type 13 has an invalid length. [ 494.345574][T17841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3111'. [ 494.515335][T17850] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 494.522277][T17850] dvmrp1: linktype set to 774 [ 494.614316][T17807] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.622270][T17807] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.629876][T17807] bridge_slave_0: entered allmulticast mode [ 494.638231][T17807] bridge_slave_0: entered promiscuous mode [ 494.651414][T17807] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.658825][T17807] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.666512][T17807] bridge_slave_1: entered allmulticast mode [ 494.674949][T17807] bridge_slave_1: entered promiscuous mode [ 494.744597][T17807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.756294][T17861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3115'. [ 494.765937][T17861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3115'. [ 494.788634][T17807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.879459][T17807] team0: Port device team_slave_0 added [ 494.909045][T17807] team0: Port device team_slave_1 added [ 495.000309][T17807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.010128][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.039610][T17807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.055586][T17807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.065534][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.092485][T17807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.214273][T17807] hsr_slave_0: entered promiscuous mode [ 495.226889][T17807] hsr_slave_1: entered promiscuous mode [ 495.247015][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.267882][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.268531][T17881] netlink: 'syz.3.3121': attribute type 8 has an invalid length. [ 495.328283][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.338026][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.365894][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.375710][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.385744][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.452097][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.497939][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.519485][T17878] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 495.556738][ T5831] Bluetooth: hci4: command tx timeout [ 495.850646][T17807] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.888270][T17902] __nla_validate_parse: 10 callbacks suppressed [ 495.888289][T17902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3126'. [ 495.924682][T17902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3126'. [ 495.956009][T17902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3126'. [ 496.024500][T17909] netlink: 'syz.2.3128': attribute type 10 has an invalid length. [ 496.048083][T17807] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.074511][T17909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3128'. [ 496.101254][T17909] veth0_vlan: entered allmulticast mode [ 496.111866][T17909] bridge0: port 3(veth0_vlan) entered blocking state [ 496.123509][T17909] bridge0: port 3(veth0_vlan) entered disabled state [ 496.149284][T17909] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 496.205637][T17807] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.277769][T17921] netlink: 'syz.1.3131': attribute type 61 has an invalid length. [ 496.293934][T17807] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.394651][T17920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3130'. [ 496.433926][ T5831] Bluetooth: hci0: command tx timeout [ 496.521767][T17929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3132'. [ 496.585529][T17807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.622619][T17807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 496.662783][T17807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.686076][T17934] bridge_slave_0: left allmulticast mode [ 496.700512][T17934] bridge_slave_0: left promiscuous mode [ 496.722306][T17934] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.763085][T17934] bridge_slave_1: left allmulticast mode [ 496.770129][T17934] bridge_slave_1: left promiscuous mode [ 496.776809][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.789892][T17934] bond0: (slave bond_slave_0): Releasing backup interface [ 496.804223][T17934] bond0: (slave bond_slave_1): Releasing backup interface [ 496.842840][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 496.855232][T17934] team0: Port device team_slave_0 removed [ 496.884408][T17934] team0: Port device team_slave_1 removed [ 496.905795][T17934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.920173][T17934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.930112][T17934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.938898][T17934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.949926][T17934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 496.989910][T17929] syzkaller1: entered promiscuous mode [ 496.998654][T17929] syzkaller1: entered allmulticast mode [ 497.008134][T17807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.039219][T17948] syzkaller1: entered promiscuous mode [ 497.049352][T17948] syzkaller1: entered allmulticast mode [ 497.320191][T17940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.576067][T17807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.610396][ T30] audit: type=1800 audit(1760520313.483:8): pid=17965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3139" name="memory.events" dev="tmpfs" ino=97 res=0 errno=0 [ 497.629336][T17807] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.637995][ T5831] Bluetooth: hci4: command tx timeout [ 497.662510][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.669732][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.746415][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.753648][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.491272][T17807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.659758][T17807] veth0_vlan: entered promiscuous mode [ 498.714642][T17807] veth1_vlan: entered promiscuous mode [ 498.812922][T17807] veth0_macvtap: entered promiscuous mode [ 498.836885][T17807] veth1_macvtap: entered promiscuous mode [ 498.903240][T17807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.939398][T17807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.964273][T18019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.001619][T18019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.028387][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.058858][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.334105][T18039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.355357][T18039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.436869][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.462517][T18050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3155'. [ 499.474602][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.711323][ T5831] Bluetooth: hci4: command tx timeout [ 499.771634][T18063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3158'. [ 499.783270][T18063] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3158'. [ 499.856613][T18022] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.874221][T18022] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.894794][T18022] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.904934][T18022] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.734162][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.749630][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.763341][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.764667][T18084] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 500.789000][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.798531][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.844839][T18084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.853144][T18084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.906221][T18084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.001882][T18084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.190314][T18093] syzkaller1: entered promiscuous mode [ 501.202170][T18093] syzkaller1: entered allmulticast mode [ 501.568979][T18081] chnl_net:caif_netlink_parms(): no params data found [ 501.798301][ T5827] Bluetooth: hci4: command tx timeout [ 501.906799][T18081] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.959702][T18081] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.976876][T18081] bridge_slave_0: entered allmulticast mode [ 501.993409][T18081] bridge_slave_0: entered promiscuous mode [ 502.006972][T18134] __nla_validate_parse: 4 callbacks suppressed [ 502.006990][T18134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3173'. [ 502.026680][T18081] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.032647][T18136] netlink: 'syz.3.3174': attribute type 1 has an invalid length. [ 502.035446][T18081] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.052657][T18081] bridge_slave_1: entered allmulticast mode [ 502.056070][T18136] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3174'. [ 502.063229][T18081] bridge_slave_1: entered promiscuous mode [ 502.074641][T18138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3176'. [ 502.178351][T18138] nbd: socks must be embedded in a SOCK_ITEM attr [ 502.198697][T18081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.223801][T18081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.342455][T18081] team0: Port device team_slave_0 added [ 502.355291][T18081] team0: Port device team_slave_1 added [ 502.587496][T18081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.601196][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.644541][T18081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.686620][T18081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.731501][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.771860][T18081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.912336][ T5827] Bluetooth: hci1: command tx timeout [ 502.997932][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3187'. [ 503.015694][T18178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3186'. [ 503.061685][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3187'. [ 503.109627][T18081] hsr_slave_0: entered promiscuous mode [ 503.155152][T18081] hsr_slave_1: entered promiscuous mode [ 503.169624][T18081] debugfs: 'hsr0' already exists in 'hsr' [ 503.201323][T18081] Cannot create hsr debugfs directory [ 503.394811][T18201] openvswitch: netlink: Message has 4 unknown bytes. [ 503.419863][T18201] netlink: 'syz.1.3192': attribute type 2 has an invalid length. [ 503.458115][T18201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3192'. [ 503.647746][T18208] macsec1: entered promiscuous mode [ 503.657695][T18208] macsec1: entered allmulticast mode [ 503.686975][T18219] syzkaller1: entered promiscuous mode [ 503.693168][T18219] syzkaller1: entered allmulticast mode [ 503.735480][T18081] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.827924][T18081] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.877580][T18228] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 4, id = 0 [ 503.973266][T18081] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.085733][T18230] netlink: 'syz.2.3202': attribute type 12 has an invalid length. [ 504.143622][T18081] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.503862][T18245] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 504.627836][T18254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3208'. [ 504.643718][T18254] netlink: 'syz.1.3208': attribute type 1 has an invalid length. [ 504.743841][T18081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 504.852534][T18262] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3210'. [ 504.879602][T18081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 504.996351][ T5827] Bluetooth: hci1: command tx timeout [ 505.042985][T18081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 505.134848][T18081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 505.302166][T18275] syzkaller1: entered promiscuous mode [ 505.313075][T18275] syzkaller1: entered allmulticast mode [ 505.576968][T18081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.620276][T18081] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.763347][T18022] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.770560][T18022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.803247][T18022] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.810439][T18022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.840251][T18306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3219'. [ 505.891955][T18312] syzkaller1: entered promiscuous mode [ 505.897463][T18312] syzkaller1: entered allmulticast mode [ 506.139460][T18319] syzkaller1: entered promiscuous mode [ 506.152700][T18319] syzkaller1: entered allmulticast mode [ 506.540121][T18344] netlink: 'syz.0.3228': attribute type 13 has an invalid length. [ 506.555038][T18344] netlink: 'syz.0.3228': attribute type 17 has an invalid length. [ 506.677633][T18344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.692958][T18351] netlink: 'syz.3.3232': attribute type 10 has an invalid length. [ 506.817847][T18081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.005667][T18359] netlink: 'syz.1.3234': attribute type 8 has an invalid length. [ 507.073113][ T5827] Bluetooth: hci1: command tx timeout [ 509.151313][ T5827] Bluetooth: hci1: command tx timeout [ 509.203889][T18081] veth0_vlan: entered promiscuous mode [ 509.225281][T18081] veth1_vlan: entered promiscuous mode [ 509.355786][T18391] netlink: 'syz.0.3238': attribute type 276 has an invalid length. [ 509.402527][T18391] pimreg: entered allmulticast mode [ 509.430372][T18391] pimreg: left allmulticast mode [ 509.494676][T18399] syzkaller0: entered promiscuous mode [ 509.500368][T18399] syzkaller0: entered allmulticast mode [ 509.508561][T18081] veth0_macvtap: entered promiscuous mode [ 509.552207][T18391] netlink: 'syz.0.3238': attribute type 11 has an invalid length. [ 509.560191][T18391] netlink: 'syz.0.3238': attribute type 11 has an invalid length. [ 509.574434][T18391] __nla_validate_parse: 5 callbacks suppressed [ 509.574456][T18391] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3238'. [ 509.622299][T18081] veth1_macvtap: entered promiscuous mode [ 509.745905][T18081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.804427][T18081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.957916][T18404] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.974615][T18404] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.038385][T18039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.059645][T18039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.145251][T18404] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.157737][T18404] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.176673][T18039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.186762][T18039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.482605][T18421] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.490055][T18421] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.704669][T18421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.722727][T18421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.047920][T18404] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.059074][T18404] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.121843][T18427] bridge0: entered promiscuous mode [ 511.131382][T18427] vlan2: entered promiscuous mode [ 511.178738][T18444] tipc: Enabling of bearer rejected, failed to enable media [ 511.188854][T18039] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.231518][T18039] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.285846][T18404] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.308628][T18404] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.356367][T18039] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.371701][T18039] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.550369][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.565745][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.608255][T18039] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.617272][T18039] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.701989][T18039] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.715083][T18462] delete_channel: no stack [ 511.715379][T18039] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.743504][T18039] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.754322][T18039] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.772552][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.780404][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.827280][T18407] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.852643][T18472] netlink: 'syz.2.3253': attribute type 5 has an invalid length. [ 511.870302][T18407] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.892589][T18472] sctp: [Deprecated]: syz.2.3253 (pid 18472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.892589][T18472] Use struct sctp_sack_info instead [ 512.003009][T18407] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.044385][T18407] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.093064][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.109118][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.249891][T18407] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.267049][T18407] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.335554][T18485] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3257'. [ 512.379461][T18407] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.401422][T18407] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.427625][T18485] syzkaller0: entered promiscuous mode [ 512.448071][T18485] syzkaller0: entered allmulticast mode [ 512.757698][T18500] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3261'. [ 512.795621][T18505] netlink: 'syz.1.3262': attribute type 6 has an invalid length. [ 512.872052][T18507] netem: incorrect gi model size [ 512.878629][T18507] netem: change failed [ 512.984318][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3266'. [ 513.033512][T18517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.067596][T18512] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 513.136582][T18525] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 513.164479][T18525] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 513.177839][T18525] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 513.536994][T18542] netlink: 'syz.0.3273': attribute type 2 has an invalid length. [ 513.563652][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3273'. [ 513.707588][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3272'. [ 513.732294][T18550] syz_tun: entered allmulticast mode [ 513.756529][T18545] netlink: 'syz.1.3272': attribute type 12 has an invalid length. [ 513.765072][T18545] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3272'. [ 513.878124][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3277'. [ 513.929190][T18552] syz_tun: left allmulticast mode [ 514.056975][T18566] syz_tun: entered allmulticast mode [ 514.091685][T18566] dvmrp1: entered allmulticast mode [ 514.175402][T18570] tbf_change: 46 callbacks suppressed [ 514.175421][T18570] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 514.314976][T18578] Bluetooth: hci0: unsupported parameter 44250 [ 514.322669][T18578] Bluetooth: hci0: unsupported parameter 44250 [ 514.375740][T18581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3284'. [ 514.424900][T18581] vlan2: entered promiscuous mode [ 514.430269][T18581] bond0: entered promiscuous mode [ 514.439277][T18581] bond_slave_0: entered promiscuous mode [ 514.445924][T18581] bond_slave_1: entered promiscuous mode [ 514.459824][T18565] syz_tun: left allmulticast mode [ 514.468352][T18587] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3285'. [ 514.496258][T18580] delete_channel: no stack [ 514.716341][T18597] bond0: Unable to set up delay as MII monitoring is disabled [ 515.223858][T18621] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 515.414801][T18039] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.424317][T18039] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.448381][T18039] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.457373][T18039] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.490068][T18039] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.503563][T18039] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.524815][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.533976][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.733765][T18637] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3302'. [ 516.766415][T18637] team0: Port device team_slave_0 removed [ 517.056248][T18656] netlink: zone id is out of range [ 517.558485][T18683] tipc: Enabling of bearer rejected, media not registered [ 518.033412][T18714] geneve2: entered promiscuous mode [ 518.068973][ T50] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 50106 - 0 [ 518.091958][ T50] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 50106 - 0 [ 518.120082][ T50] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 50106 - 0 [ 518.148949][ T50] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 50106 - 0 [ 518.180265][T18721] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 518.340484][T18038] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.359200][T18038] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.394796][T18038] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.450287][T18038] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.829182][T18441] hid-generic 0005:15C2:5505.0002: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 518.847486][T18762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3331'. [ 519.036321][T18754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3331'. [ 521.002985][T18758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3331'. [ 521.017674][T18774] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3333'. [ 521.237383][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3337'. [ 521.269935][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3336'. [ 521.424008][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 521.455164][T18821] vlan2: entered promiscuous mode [ 521.460472][T18821] bond0: entered promiscuous mode [ 521.466339][T18821] bond_slave_0: entered promiscuous mode [ 521.473055][T18821] bond_slave_1: entered promiscuous mode [ 521.499763][T18830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3340'. [ 521.538129][T18830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3340'. [ 521.770468][T18823] team0: Port device team_slave_0 removed [ 522.198175][T18846] tap0: tun_chr_ioctl cmd 1074025677 [ 522.240105][T18846] tap0: linktype set to 776 [ 522.275878][T18855] tap0: tun_chr_ioctl cmd 1074025673 [ 522.286055][T18854] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 522.621333][T18870] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 522.629105][T18870] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3348'. [ 522.666224][T18872] syzkaller1: entered promiscuous mode [ 522.693640][T18872] syzkaller1: entered allmulticast mode [ 522.694178][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 522.735578][T18870] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3348'. [ 523.094317][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 523.131648][T18887] vxcan1: entered allmulticast mode [ 523.178145][T18892] vxcan1: left allmulticast mode [ 523.298064][T18890] syzkaller0: entered promiscuous mode [ 523.304358][T18890] syzkaller0: entered allmulticast mode [ 523.436031][T18910] netlink: 'syz.1.3353': attribute type 3 has an invalid length. [ 523.467480][T18914] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 523.489868][T18910] netlink: 'syz.1.3353': attribute type 1 has an invalid length. [ 523.923311][T18926] netlink: 'syz.1.3357': attribute type 10 has an invalid length. [ 524.248869][T18930] netlink: 'syz.4.3358': attribute type 21 has an invalid length. [ 525.266969][T18926] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 525.292066][T18930] netlink: 'syz.4.3358': attribute type 4 has an invalid length. [ 525.594830][T18948] netlink: zone id is out of range [ 525.614520][T18948] netlink: zone id is out of range [ 525.626065][T18948] netlink: zone id is out of range [ 525.643343][T18948] netlink: zone id is out of range [ 525.664552][T18948] netlink: zone id is out of range [ 525.693840][T18948] netlink: zone id is out of range [ 525.730852][T18948] netlink: zone id is out of range [ 525.736450][T18948] netlink: zone id is out of range [ 525.748965][T18948] netlink: zone id is out of range [ 525.755403][T18948] netlink: zone id is out of range [ 525.847399][T18952] syzkaller1: entered promiscuous mode [ 525.854253][T18952] syzkaller1: entered allmulticast mode [ 526.074575][T18959] netlink: 'syz.0.3367': attribute type 1 has an invalid length. [ 526.114909][T18959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.162673][T18968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.169860][T18968] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 526.182454][T18968] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 526.358452][T18959] veth3: entered promiscuous mode [ 526.396989][T18959] bond1: (slave veth3): Enslaving as an active interface with a down link [ 526.439045][T18981] syz_tun: entered allmulticast mode [ 526.674801][T18981] dvmrp8: entered allmulticast mode [ 526.751725][T18997] netlink: 'syz.1.3374': attribute type 10 has an invalid length. [ 526.772782][T18997] veth1_vlan: entered allmulticast mode [ 526.817206][T19000] __nla_validate_parse: 5 callbacks suppressed [ 526.817224][T19000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3375'. [ 526.824636][T18997] team0: Device veth1_vlan failed to register rx_handler [ 526.873813][T19004] netlink: 'syz.0.3375': attribute type 1 has an invalid length. [ 526.896110][T19004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'. [ 526.959881][T19004] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3375'. [ 526.993707][T18980] syz_tun: left allmulticast mode [ 526.998885][T18980] dvmrp8: left allmulticast mode [ 527.190198][T19013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3379'. [ 527.206754][T19017] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3378'. [ 527.532598][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 527.593054][T19026] syzkaller0: entered promiscuous mode [ 527.598570][T19026] syzkaller0: entered allmulticast mode [ 527.650150][T19045] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3385'. [ 527.674433][T19045] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3385'. [ 528.013542][T19060] netlink: 'syz.3.3389': attribute type 13 has an invalid length. [ 529.237852][T19128] tipc: Started in network mode [ 529.242890][T19128] tipc: Node identity f6c99751326a, cluster identity 4711 [ 529.262487][T19128] tipc: Enabled bearer , priority 0 [ 529.328854][T19128] tipc: Disabling bearer [ 529.383766][T19095] Bluetooth: hci0: invalid len left 70, exp >= 258 [ 529.435915][T19135] netlink: 'syz.3.3404': attribute type 1 has an invalid length. [ 529.444351][T19135] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3404'. [ 529.462206][T19135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3404'. [ 529.813560][T19143] syzkaller1: entered promiscuous mode [ 529.819262][T19143] syzkaller1: entered allmulticast mode [ 529.903845][T19147] netlink: 'syz.3.3408': attribute type 4 has an invalid length. [ 530.084229][T19157] gretap0: entered promiscuous mode [ 530.555535][T19178] netlink: 'syz.0.3418': attribute type 3 has an invalid length. [ 530.772191][T18455] IPVS: starting estimator thread 0... [ 530.868204][T19201] IPVS: using max 32 ests per chain, 76800 per kthread [ 531.881402][T19249] __nla_validate_parse: 10 callbacks suppressed [ 531.881421][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3437'. [ 531.948233][T19246] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 531.956996][T19248] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 532.115321][T19250] syzkaller1: entered promiscuous mode [ 532.122297][T19250] syzkaller1: entered allmulticast mode [ 532.490918][T19276] syz.2.3443: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 532.507407][T19276] CPU: 0 UID: 0 PID: 19276 Comm: syz.2.3443 Not tainted syzkaller #0 PREEMPT(full) [ 532.507437][T19276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.507452][T19276] Call Trace: [ 532.507460][T19276] [ 532.507469][T19276] dump_stack_lvl+0x189/0x250 [ 532.507501][T19276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.507524][T19276] ? __pfx__printk+0x10/0x10 [ 532.507546][T19276] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 532.507575][T19276] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 532.507605][T19276] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 532.507637][T19276] warn_alloc+0x214/0x310 [ 532.507666][T19276] ? stack_depot_save_flags+0x40/0x860 [ 532.507695][T19276] ? __pfx_warn_alloc+0x10/0x10 [ 532.507735][T19276] ? kasan_save_track+0x3e/0x80 [ 532.507760][T19276] ? __kasan_kmalloc+0x93/0xb0 [ 532.507790][T19276] ? xsk_setsockopt+0x4dc/0x8d0 [ 532.507811][T19276] ? do_sock_setsockopt+0x179/0x1b0 [ 532.507834][T19276] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 532.507857][T19276] ? do_syscall_64+0xfa/0xfa0 [ 532.507881][T19276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.507914][T19276] __vmalloc_node_range_noprof+0x125/0x12d0 [ 532.507980][T19276] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 532.508014][T19276] ? __kasan_kmalloc+0x93/0xb0 [ 532.508051][T19276] vmalloc_user_noprof+0xad/0xf0 [ 532.508081][T19276] ? xskq_create+0xbf/0x170 [ 532.508105][T19276] xskq_create+0xbf/0x170 [ 532.508133][T19276] xsk_init_queue+0xb0/0x110 [ 532.508160][T19276] xsk_setsockopt+0x4dc/0x8d0 [ 532.508184][T19276] ? __pfx_xsk_setsockopt+0x10/0x10 [ 532.508210][T19276] ? __pfx_aa_sk_perm+0x10/0x10 [ 532.508238][T19276] ? aa_sock_opt_perm+0xff/0x1b0 [ 532.508270][T19276] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 532.508289][T19276] ? __pfx_xsk_setsockopt+0x10/0x10 [ 532.508313][T19276] do_sock_setsockopt+0x179/0x1b0 [ 532.508342][T19276] __x64_sys_setsockopt+0x13f/0x1b0 [ 532.508371][T19276] do_syscall_64+0xfa/0xfa0 [ 532.508395][T19276] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.508419][T19276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.508440][T19276] ? clear_bhb_loop+0x60/0xb0 [ 532.508465][T19276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.508485][T19276] RIP: 0033:0x7f32d958eec9 [ 532.508504][T19276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.508522][T19276] RSP: 002b:00007f32da38d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 532.508545][T19276] RAX: ffffffffffffffda RBX: 00007f32d97e5fa0 RCX: 00007f32d958eec9 [ 532.508561][T19276] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 532.508575][T19276] RBP: 00007f32d9611f91 R08: 0000000000000004 R09: 0000000000000000 [ 532.508588][T19276] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.508602][T19276] R13: 00007f32d97e6038 R14: 00007f32d97e5fa0 R15: 00007ffd83f2c0a8 [ 532.508641][T19276] [ 532.510478][T19276] Mem-Info: [ 532.562870][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 532.580711][T19276] active_anon:9813 inactive_anon:0 isolated_anon:0 [ 532.580711][T19276] active_file:3467 inactive_file:40063 isolated_file:0 [ 532.580711][T19276] unevictable:768 dirty:294 writeback:0 [ 532.580711][T19276] slab_reclaimable:12315 slab_unreclaimable:153148 [ 532.580711][T19276] mapped:31721 shmem:6524 pagetables:1068 [ 532.580711][T19276] sec_pagetables:0 bounce:0 [ 532.580711][T19276] kernel_misc_reclaimable:0 [ 532.580711][T19276] free:1250701 free_pcp:16091 free_cma:0 [ 532.794763][T19277] macsec1: entered promiscuous mode [ 532.865083][T19276] Node 0 active_anon:25752kB inactive_anon:0kB active_file:13868kB inactive_file:160052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125884kB dirty:1172kB writeback:0kB shmem:11060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15228kB pagetables:4144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.887495][T19277] batadv0: entered promiscuous mode [ 532.903291][T19276] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.942410][T19276] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.957939][T19278] tipc: Started in network mode [ 532.978221][T19276] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 532.989715][T19278] tipc: Node identity 2a301e1975e5, cluster identity 4711 [ 532.992010][T19276] Node 0 DMA32 free:1100676kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18588kB inactive_anon:0kB active_file:13868kB inactive_file:160052kB unevictable:1536kB writepending:1180kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:61316kB local_pcp:35068kB free_cma:0kB [ 533.032364][T19278] tipc: Enabled bearer , priority 0 [ 533.039351][T19276] lowmem_reserve[]: 0 0 1 1 1 [ 533.069947][T19276] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.107183][T19276] lowmem_reserve[]: 0 0 0 0 0 [ 533.116164][T19276] Node 1 Normal free:3903568kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6560kB local_pcp:0kB free_cma:0kB [ 533.179967][T19276] lowmem_reserve[]: 0 0 0 0 0 [ 533.187586][T19276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 533.203801][T19276] Node 0 DMA32: 1178*4kB (UM) 317*8kB (UM) 69*16kB (UME) 279*32kB (UME) 90*64kB (UME) 38*128kB (UME) 27*256kB (UME) 23*512kB (UM) 36*1024kB (UME) 9*2048kB (UM) [ 533.204476][T19273] tipc: Disabling bearer [ 533.226924][T19276] 244*4096kB (UM) = 1101312kB [ 533.232828][T19276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 533.244783][T19276] Node 1 Normal: 166*4kB (UME) 45*8kB (UME) 39*16kB (UME) 201*32kB (UME) 75*64kB (UME) 10*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3903568kB [ 533.263991][T19276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.277132][T19276] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 533.312165][T19276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.326125][T19290] pimreg: tun_chr_ioctl cmd 2147767506 [ 533.339806][T18455] IPVS: starting estimator thread 0... [ 533.354620][T19276] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 533.364861][T19276] 44897 total pagecache pages [ 533.369649][T19276] 0 pages in swap cache [ 533.381793][T19276] Free swap = 124996kB [ 533.386053][T19276] Total swap = 124996kB [ 533.390296][T19276] 2097051 pages RAM [ 533.418776][T19276] 0 pages HighMem/MovableOnly [ 533.424747][T19276] 424543 pages reserved [ 533.429050][T19276] 0 pages cma reserved [ 533.442888][T19293] IPVS: using max 30 ests per chain, 72000 per kthread [ 533.473236][T19296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3447'. [ 533.516241][T19296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3447'. [ 533.530433][T19297] netlink: 'syz.3.3448': attribute type 11 has an invalid length. [ 533.551228][T19296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3447'. [ 533.838550][T19319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3454'. [ 533.853519][T19321] syzkaller1: entered promiscuous mode [ 533.859199][T19321] syzkaller1: entered allmulticast mode [ 533.873214][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'. [ 533.890416][T19319] ªªªªªª: renamed from wg2 (while UP) [ 533.905611][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3455'. [ 534.045197][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 534.070305][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3456'. [ 534.087315][T19329] netlink: 'syz.3.3456': attribute type 20 has an invalid length. [ 534.178826][T19329] netlink: 'syz.3.3456': attribute type 20 has an invalid length. [ 534.351972][T19265] Bluetooth: hci1: command 0x0405 tx timeout [ 534.502817][T19353] netlink: 'syz.0.3463': attribute type 1 has an invalid length. [ 534.598711][T19367] net_ratelimit: 16 callbacks suppressed [ 534.598733][T19367] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 534.810227][T19376] sctp: [Deprecated]: syz.1.3472 (pid 19376) Use of int in maxseg socket option. [ 534.810227][T19376] Use struct sctp_assoc_value instead [ 534.833065][T19376] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20004 [ 534.969638][T19388] syzkaller1: entered promiscuous mode [ 534.993707][T19388] syzkaller1: entered allmulticast mode [ 535.068745][T19115] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.091832][T19115] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.116755][T19115] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.172704][T19115] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.256914][T19403] syzkaller1: entered promiscuous mode [ 535.263401][T19403] syzkaller1: entered allmulticast mode [ 535.707848][T19429] netlink: 'syz.1.3486': attribute type 1 has an invalid length. [ 535.931035][T19438] tipc: Started in network mode [ 535.936109][T19438] tipc: Node identity 4679e86e524, cluster identity 4711 [ 535.953117][T19438] tipc: Enabled bearer , priority 0 [ 535.982890][T19438] syzkaller0: entered promiscuous mode [ 535.985591][T19441] sctp: [Deprecated]: syz.0.3487 (pid 19441) Use of int in max_burst socket option. [ 535.985591][T19441] Use struct sctp_assoc_value instead [ 535.996992][T19438] syzkaller0: entered allmulticast mode [ 536.095239][T19438] tipc: Resetting bearer [ 536.116386][T19437] tipc: Resetting bearer [ 536.133295][T19437] tipc: Disabling bearer [ 536.157191][T19445] syzkaller0: entered promiscuous mode [ 536.163722][T19445] syzkaller0: entered allmulticast mode [ 536.417437][T19450] syzkaller1: entered promiscuous mode [ 536.429476][T19450] syzkaller1: entered allmulticast mode [ 536.449727][T19450] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 536.954422][T19454] veth1_macvtap: left promiscuous mode [ 537.007305][T19462] __nla_validate_parse: 28 callbacks suppressed [ 537.007322][T19462] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3493'. [ 537.067962][T19479] : option downdelay: invalid value (18446744073709551615) [ 537.076217][T19479] : option downdelay: allowed values 0 - 2147483647 [ 537.086541][T19479]  (unregistering): Released all slaves [ 537.323410][T19491] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 537.334917][T19491] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 537.367990][T19491] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3502'. [ 537.395568][T19491] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 537.427248][T19491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3502'. [ 537.438762][T19494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3504'. [ 537.448654][T19494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3504'. [ 537.471853][T19494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3504'. [ 537.788305][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 537.849681][T19516] netlink: 'syz.0.3508': attribute type 39 has an invalid length. [ 537.953738][T19516] veth0_macvtap: left promiscuous mode [ 537.958649][T19524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3510'. [ 538.007641][T19524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3510'. [ 538.045573][T19528] veth1_to_bond: entered allmulticast mode [ 538.057348][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 538.118735][T19528] bond0: (slave bond_slave_1): Releasing backup interface [ 538.127733][T19528] bond_slave_1 (unregistering): left promiscuous mode [ 538.154714][T19528] veth1_to_bond (unregistering): left allmulticast mode [ 538.316486][T19536] openvswitch: netlink: Flow key attr not present in new flow. [ 538.500540][T19547] bridge0: entered promiscuous mode [ 538.508302][T19547] vlan3: entered promiscuous mode [ 539.811525][ T30] audit: type=1800 audit(1760520355.683:9): pid=19579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3522" name="memory.events" dev="tmpfs" ino=431 res=0 errno=0 [ 540.757609][T19635] netlink: 'syz.2.3538': attribute type 4 has an invalid length. [ 541.067610][T19646] IPv6: NLM_F_CREATE should be specified when creating new route [ 541.091926][T19646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.099314][T19646] IPv6: NLM_F_CREATE should be set when creating new route [ 541.247823][T19656] syzkaller1: entered promiscuous mode [ 541.255074][T19656] syzkaller1: entered allmulticast mode [ 541.437542][T19664] x_tables: duplicate underflow at hook 1 [ 541.720360][T19675] tipc: Started in network mode [ 541.742464][T19675] tipc: Node identity 080211, cluster identity 4711 [ 541.759668][T19675] tipc: Enabled bearer , priority 0 [ 541.781184][T19675] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 541.797065][T19675] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 541.913989][T19686] sctp: [Deprecated]: syz.4.3551 (pid 19686) Use of int in maxseg socket option. [ 541.913989][T19686] Use struct sctp_assoc_value instead [ 541.942248][T19675] tipc: Resetting bearer [ 542.032473][T19685] __nla_validate_parse: 8 callbacks suppressed [ 542.032491][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3553'. [ 542.116075][T19696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3553'. [ 542.143199][T19696] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 542.236500][T19700] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3556'. [ 542.352682][T19700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.365055][T19700] bond_slave_0: left promiscuous mode [ 542.385528][T19700] bond0 (unregistering): Released all slaves [ 542.419221][T19702] debugfs: 'žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' already exists in 'ieee80211' [ 542.759307][T19713] x_tables: duplicate underflow at hook 1 [ 542.792279][T18450] tipc: Node number set to 134353152 [ 542.823585][T19719] tipc: Enabling of bearer rejected, failed to enable media [ 542.903113][T19726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3566'. [ 542.988739][T19724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.009154][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 543.114514][T19734] bridge0: port 3(syz_tun) entered blocking state [ 543.156819][T19734] bridge0: port 3(syz_tun) entered disabled state [ 543.168099][T19734] syz_tun: entered allmulticast mode [ 543.176131][T19734] syz_tun: entered promiscuous mode [ 543.183290][T19734] bridge0: port 3(syz_tun) entered blocking state [ 543.189830][T19734] bridge0: port 3(syz_tun) entered forwarding state [ 543.213109][T19746] netlink: 'syz.2.3570': attribute type 24 has an invalid length. [ 543.251400][T19746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3570'. [ 543.368074][T19746] bond2: option ad_actor_sys_prio: invalid value (0) [ 543.380418][T19746] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 543.453843][T19746] bond2 (unregistering): Released all slaves [ 543.556509][T19753] sch_fq: defrate 4294967293 ignored. [ 543.649530][T19741] infiniband syz1: set active [ 543.656180][T19741] infiniband syz1: added syz_tun [ 543.802257][T19741] RDS/IB: syz1: added [ 543.806332][T19741] smc: adding ib device syz1 with port count 1 [ 543.814487][T19741] smc: ib device syz1 port 1 has no pnetid [ 544.008456][T19770] netlink: 'syz.0.3574': attribute type 1 has an invalid length. [ 544.732938][T19795] xt_hashlimit: invalid rate [ 545.075900][T19811] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 545.151200][T19265] Bluetooth: hci1: command 0x0405 tx timeout [ 545.419973][T19824] netlink: 'syz.2.3588': attribute type 2 has an invalid length. [ 545.683987][T19834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3589'. [ 545.884108][T19842] netlink: 'syz.3.3591': attribute type 1 has an invalid length. [ 545.901232][T19842] netlink: 'syz.3.3591': attribute type 4 has an invalid length. [ 545.921526][T19842] netlink: 15586 bytes leftover after parsing attributes in process `syz.3.3591'. [ 546.813791][T19869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3599'. [ 546.823174][T19869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3599'. [ 546.965668][T19871] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3600'. [ 547.165833][T19877] netlink: 'syz.3.3601': attribute type 1 has an invalid length. [ 547.261825][T19877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3601'. [ 547.291410][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 547.522063][T19881] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.529839][T19881] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.884929][T19881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.947783][T19881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.072865][T19881] veth1_vlan: left allmulticast mode [ 548.372884][T19881] geneve2: left promiscuous mode [ 548.429984][T19885] dvmrp0: entered allmulticast mode [ 548.464185][T19109] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.475617][T19109] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.493174][T19109] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 50106 - 0 [ 548.515756][T19109] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.547176][T19109] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.572467][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3607'. [ 548.572585][T19109] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 50106 - 0 [ 548.623388][T19898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3608'. [ 548.646894][T19109] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.670012][T19109] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.691528][T19109] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 50106 - 0 [ 548.718824][T19109] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.731375][T19109] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.750425][T19109] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 50106 - 0 [ 548.774586][T19898] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 548.936075][T19916] openvswitch: netlink: Message has 2 unknown bytes. [ 548.989273][T19915] openvswitch: netlink: Message has 2 unknown bytes. [ 549.006456][T19915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.040242][T19916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.057055][T19918] tipc: Enabled bearer , priority 11 [ 549.078725][T19919] tipc: Enabling of bearer rejected, already enabled [ 549.135265][T19921] netlink: 'syz.1.3613': attribute type 15 has an invalid length. [ 549.215139][T19926] gretap2: entered promiscuous mode [ 549.224552][T19925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3615'. [ 549.258103][T19926] gretap2: entered allmulticast mode [ 549.594927][T19938] tipc: Started in network mode [ 549.599956][T19938] tipc: Node identity f6c0b261557e, cluster identity 4711 [ 549.608074][T19938] tipc: Enabled bearer , priority 0 [ 549.728090][T19938] syzkaller0: entered promiscuous mode [ 549.737021][T19938] syzkaller0: entered allmulticast mode [ 549.744503][T19938] tipc: Resetting bearer [ 549.788985][T19937] tipc: Resetting bearer [ 550.644836][T18428] tipc: Node number set to 2747183713 [ 551.270579][T19968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 551.481956][T19937] tipc: Disabling bearer [ 551.779712][T19977] tipc: Enabled bearer , priority 0 [ 551.788487][T19977] syzkaller0: entered promiscuous mode [ 551.795792][T19977] syzkaller0: entered allmulticast mode [ 551.821431][T19976] tipc: Resetting bearer [ 551.841026][T19976] tipc: Disabling bearer [ 552.230262][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3631'. [ 553.167734][T20005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3636'. [ 553.299257][ T30] audit: type=1800 audit(1760520369.173:10): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3637" name="cpuacct.usage_all" dev="tmpfs" ino=857 res=0 errno=0 [ 553.360432][T20010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3638'. [ 553.407703][T20014] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 553.415615][T20014] netlink: 'syz.2.3637': attribute type 2 has an invalid length. [ 553.527533][T18022] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 553.537485][T18022] ip6gretap1 (unregistering): left allmulticast mode [ 553.823669][T18022] dvmrp8 (unregistering): left allmulticast mode [ 555.731251][T18022] bond8 (unregistering): (slave bridge45): Releasing backup interface [ 555.739551][T18022] bond8 (unregistering): (slave bridge45): the permanent HWaddr of slave - ce:13:8b:47:96:2c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 555.758465][T18022] bridge45 (unregistering): left promiscuous mode [ 555.765217][T18022] bond8 (unregistering): (slave bridge46): making interface the new active one [ 555.775822][T18022] bridge46 (unregistering): entered promiscuous mode [ 555.830309][T18022] bond8 (unregistering): (slave bridge46): Releasing backup interface [ 555.839024][T18022] bridge46 (unregistering): left promiscuous mode [ 555.845890][T18022] bond8 (unregistering): (slave bridge47): making interface the new active one [ 555.855098][T18022] bridge47 (unregistering): entered promiscuous mode [ 555.900983][T18022] bond8 (unregistering): (slave bridge47): Releasing backup interface [ 555.909260][T18022] bridge47 (unregistering): left promiscuous mode [ 555.915944][T18022] bond8 (unregistering): (slave bridge48): making interface the new active one [ 555.925756][T18022] bridge48 (unregistering): entered promiscuous mode [ 555.980449][T18022] bond8 (unregistering): (slave bridge48): Releasing backup interface [ 555.989159][T18022] bridge48 (unregistering): left promiscuous mode [ 555.995968][T18022] bond8 (unregistering): (slave bridge49): making interface the new active one [ 556.005105][T18022] bridge49 (unregistering): entered promiscuous mode [ 556.060019][T18022] bond8 (unregistering): (slave bridge49): Releasing backup interface [ 556.068488][T18022] bridge49 (unregistering): left promiscuous mode [ 556.075031][T18022] bond8 (unregistering): (slave bridge50): making interface the new active one [ 556.084103][T18022] bridge50 (unregistering): entered promiscuous mode [ 556.139844][T18022] bond8 (unregistering): (slave bridge50): Releasing backup interface [ 556.148262][T18022] bridge50 (unregistering): left promiscuous mode [ 556.155248][T18022] bond8 (unregistering): (slave bridge51): making interface the new active one [ 556.164496][T18022] bridge51 (unregistering): entered promiscuous mode [ 556.219615][T18022] bond8 (unregistering): (slave bridge51): Releasing backup interface [ 556.228185][T18022] bridge51 (unregistering): left promiscuous mode [ 556.235934][T18022] bond8 (unregistering): (slave bridge52): making interface the new active one [ 556.245320][T18022] bridge52 (unregistering): entered promiscuous mode [ 556.300587][T18022] bond8 (unregistering): (slave bridge52): Releasing backup interface [ 556.308866][T18022] bridge52 (unregistering): left promiscuous mode [ 556.358856][T18022] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 556.368940][T18022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.378612][T18022] bond0 (unregistering): Released all slaves [ 556.483969][T18022] bond1 (unregistering): (slave bond2): Releasing backup interface [ 556.492835][T18022] bond1 (unregistering): Released all slaves [ 556.588648][T18022] bond2 (unregistering): Released all slaves [ 556.603953][T18022] bond3 (unregistering): Released all slaves [ 556.704148][T18022] bond4 (unregistering): Released all slaves [ 556.799361][T18022] bond5 (unregistering): (slave vcan1): Releasing backup interface [ 556.808670][T18022] bond5 (unregistering): (slave vcan2): Releasing backup interface [ 556.818306][T18022] bond5 (unregistering): Released all slaves [ 556.917230][T18022] bond6 (unregistering): Released all slaves [ 556.930002][T18022] bond7 (unregistering): Released all slaves [ 557.026924][T18022] bond8 (unregistering): Released all slaves [ 557.123692][T18022] bond9 (unregistering): Released all slaves [ 557.474412][T18022] tipc: Disabling bearer [ 557.518176][T20039] xt_hashlimit: max too large, truncated to 1048576 [ 557.521895][T18022] tipc: Left network mode [ 558.439882][T18022] ------------[ cut here ]------------ [ 558.445815][T18022] WARNING: CPU: 0 PID: 18022 at net/wireless/core.c:204 cfg80211_switch_netns+0x58a/0x5b0 [ 558.455820][T18022] Modules linked in: [ 558.459959][T18022] CPU: 0 UID: 0 PID: 18022 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 558.470266][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 558.481003][T18022] Workqueue: netns cleanup_net [ 558.486675][T18022] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 558.493556][T18022] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 e2 57 8b f7 eb 82 e8 3b ba 25 f7 e9 63 fe ff ff e8 31 ba 25 f7 e9 59 fe ff ff e8 27 ba 25 f7 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 558.514571][T18022] RSP: 0018:ffffc90003a07840 EFLAGS: 00010293 [ 558.521088][T18022] RAX: ffffffff8a99d9d9 RBX: ffff8880737c8da0 RCX: ffff888031d65ac0 [ 558.529085][T18022] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 558.537225][T18022] RBP: 00000000ffffffef R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 558.545290][T18022] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffff8880737c8720 [ 558.553326][T18022] R13: ffff88805350de80 R14: dffffc0000000000 R15: ffff8880737c8910 [ 558.561566][T18022] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 558.570718][T18022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.577331][T18022] CR2: 0000555579fe8588 CR3: 00000000673ea000 CR4: 00000000003526f0 [ 558.585685][T18022] Call Trace: [ 558.589000][T18022] [ 558.592283][T18022] cfg80211_pernet_exit+0xa2/0x140 [ 558.597428][T18022] ops_undo_list+0x49a/0x990 [ 558.602113][T18022] ? __pfx_ops_undo_list+0x10/0x10 [ 558.607255][T18022] ? do_raw_spin_unlock+0x122/0x240 [ 558.612552][T18022] cleanup_net+0x4d8/0x820 [ 558.617001][T18022] ? __pfx_cleanup_net+0x10/0x10 [ 558.622010][T18022] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.627241][T18022] ? process_scheduled_works+0x9ef/0x17b0 [ 558.633044][T18022] ? process_scheduled_works+0x9ef/0x17b0 [ 558.638788][T18022] process_scheduled_works+0xae1/0x17b0 [ 558.644498][T18022] ? __pfx_process_scheduled_works+0x10/0x10 [ 558.650517][T18022] worker_thread+0x8a0/0xda0 [ 558.655176][T18022] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 558.661652][T18022] ? __kthread_parkme+0x7b/0x200 [ 558.666643][T18022] kthread+0x711/0x8a0 [ 558.671164][T18022] ? __pfx_worker_thread+0x10/0x10 [ 558.676298][T18022] ? __pfx_kthread+0x10/0x10 [ 558.680968][T18022] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.686181][T18022] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.691754][T18022] ? __pfx_kthread+0x10/0x10 [ 558.696399][T18022] ret_from_fork+0x4bc/0x870 [ 558.701249][T18022] ? __pfx_ret_from_fork+0x10/0x10 [ 558.706395][T18022] ? __switch_to_asm+0x39/0x70 [ 558.711206][T18022] ? __switch_to_asm+0x33/0x70 [ 558.716218][T18022] ? __pfx_kthread+0x10/0x10 [ 558.720897][T18022] ret_from_fork_asm+0x1a/0x30 [ 558.725722][T18022] [ 558.728759][T18022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 558.736139][T18022] CPU: 0 UID: 0 PID: 18022 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 558.745871][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 558.755937][T18022] Workqueue: netns cleanup_net [ 558.760724][T18022] Call Trace: [ 558.764013][T18022] [ 558.766960][T18022] dump_stack_lvl+0x99/0x250 [ 558.771560][T18022] ? __asan_memcpy+0x40/0x70 [ 558.776224][T18022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.781452][T18022] ? __pfx__printk+0x10/0x10 [ 558.786161][T18022] vpanic+0x237/0x6d0 [ 558.790159][T18022] ? __pfx_vpanic+0x10/0x10 [ 558.794690][T18022] panic+0xb9/0xc0 [ 558.798418][T18022] ? __pfx_panic+0x10/0x10 [ 558.802862][T18022] __warn+0x31b/0x4b0 [ 558.806863][T18022] ? cfg80211_switch_netns+0x58a/0x5b0 [ 558.812337][T18022] ? cfg80211_switch_netns+0x58a/0x5b0 [ 558.817816][T18022] report_bug+0x2be/0x4f0 [ 558.822156][T18022] ? cfg80211_switch_netns+0x58a/0x5b0 [ 558.827613][T18022] ? cfg80211_switch_netns+0x58a/0x5b0 [ 558.833073][T18022] ? cfg80211_switch_netns+0x58c/0x5b0 [ 558.838526][T18022] handle_bug+0x84/0x160 [ 558.842774][T18022] exc_invalid_op+0x1a/0x50 [ 558.847276][T18022] asm_exc_invalid_op+0x1a/0x20 [ 558.852120][T18022] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 558.858184][T18022] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 e2 57 8b f7 eb 82 e8 3b ba 25 f7 e9 63 fe ff ff e8 31 ba 25 f7 e9 59 fe ff ff e8 27 ba 25 f7 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 558.877795][T18022] RSP: 0018:ffffc90003a07840 EFLAGS: 00010293 [ 558.883877][T18022] RAX: ffffffff8a99d9d9 RBX: ffff8880737c8da0 RCX: ffff888031d65ac0 [ 558.891866][T18022] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 558.899835][T18022] RBP: 00000000ffffffef R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 558.907811][T18022] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffff8880737c8720 [ 558.915789][T18022] R13: ffff88805350de80 R14: dffffc0000000000 R15: ffff8880737c8910 [ 558.923770][T18022] ? cfg80211_switch_netns+0x589/0x5b0 [ 558.929260][T18022] cfg80211_pernet_exit+0xa2/0x140 [ 558.934389][T18022] ops_undo_list+0x49a/0x990 [ 558.939010][T18022] ? __pfx_ops_undo_list+0x10/0x10 [ 558.944137][T18022] ? do_raw_spin_unlock+0x122/0x240 [ 558.949345][T18022] cleanup_net+0x4d8/0x820 [ 558.953790][T18022] ? __pfx_cleanup_net+0x10/0x10 [ 558.958739][T18022] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.963944][T18022] ? process_scheduled_works+0x9ef/0x17b0 [ 558.969675][T18022] ? process_scheduled_works+0x9ef/0x17b0 [ 558.975414][T18022] process_scheduled_works+0xae1/0x17b0 [ 558.981023][T18022] ? __pfx_process_scheduled_works+0x10/0x10 [ 558.987028][T18022] worker_thread+0x8a0/0xda0 [ 558.993095][T18022] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 558.999456][T18022] ? __kthread_parkme+0x7b/0x200 [ 559.004419][T18022] kthread+0x711/0x8a0 [ 559.008508][T18022] ? __pfx_worker_thread+0x10/0x10 [ 559.013619][T18022] ? __pfx_kthread+0x10/0x10 [ 559.018216][T18022] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.023421][T18022] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.028628][T18022] ? __pfx_kthread+0x10/0x10 [ 559.033240][T18022] ret_from_fork+0x4bc/0x870 [ 559.037854][T18022] ? __pfx_ret_from_fork+0x10/0x10 [ 559.042986][T18022] ? __switch_to_asm+0x39/0x70 [ 559.047788][T18022] ? __switch_to_asm+0x33/0x70 [ 559.052561][T18022] ? __pfx_kthread+0x10/0x10 [ 559.057170][T18022] ret_from_fork_asm+0x1a/0x30 [ 559.061963][T18022] [ 559.065268][T18022] Kernel Offset: disabled [ 559.069576][T18022] Rebooting in 86400 seconds..