last executing test programs: 4.747535586s ago: executing program 3 (id=1035): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) write(r2, &(0x7f0000000140)="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", 0x117) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104"], 0x7a) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r6}, 0xc) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x8}, 0x8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r8, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000025000000010002080000000000000000000000000000000095000000000000009703f9ffff06cd000095000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r9, &(0x7f0000000380)=""/97, 0x61, 0x43, 0x0, 0x0) 2.91007436s ago: executing program 3 (id=1040): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x8}}, 0x880) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x3, 0x3, 0x1, 0x0, 0xa0000000, 0xfffffffa, 0x10}, 0x1c) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) (async, rerun: 32) write$tun(r2, 0x0, 0x0) (rerun: 32) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4000080) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc04c050}, 0x48050) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r9, &(0x7f0000000200), 0x0}, 0x20) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 2.087343651s ago: executing program 3 (id=1047): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00f9b8", @ANYRES16=r3, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a003400020202020202000004000801"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) shutdown(0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000e22a005600010600000000000000000700000000000000e5abcf46ae8fd6c74cdbbe3acfbd3d846afb7e153614ab5da1672a67906cf92ab6499d8fdbeb3057006a798265957ba17d507c8b8fd2820b7c082bfa3fd9c4d22d0813bd5c23828ca54688517a3af03e4e37182afe71b66c98d5f627cd8225defb8db47a085730af1f71d87529e78f4f3ce17de6d9fe7702277f792bdb9047a5d4f8ce7cc9e7d22765f4598e779741d816765347bd24b87314baa7896182574c690ef90d9f3d0b31b98642761cf4a5ef984f4d"], 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r1], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r13, r9, 0x47, 0x0, @void}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 1.997521465s ago: executing program 2 (id=1048): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6}, 0x60) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 1.782335023s ago: executing program 2 (id=1051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @val={0x0, 0x80, 0x4, 0x6, 0xd63d, 0x3ff}, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x2000, 0x8101, 0xc, 0x0, @opaque="476ec88a"}}}}}}, 0x3c) 1.750527622s ago: executing program 3 (id=1052): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000f"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000b80)='signal_generate\x00', r2}, 0x15) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_sample={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x29, 0x82, 0x10, 0xff, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x40, 0xfffffffd, 0x5}}) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @private0, 0x3}, @in={0x2, 0x4e22, @multicast2}], 0x2c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={r9, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x5, 0x2, 0xffff, 0x8, 0x1, 0x9601, 0x0, {r9, @in6={{0xa, 0x4e22, 0x3, @remote, 0x80000001}}, 0x7, 0x347, 0x1, 0x7, 0x18}}, &(0x7f00000000c0)=0xb0) 1.485382774s ago: executing program 1 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) socket$inet6(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b019b0000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0xf5, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000140), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x40005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, r4}, 0x94) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r5 = socket$kcm(0x2, 0x7, 0x0) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="30000000000000000000000007000000070b07000000000000000044140901"], 0x30}, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r6) (async) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) 1.333189893s ago: executing program 1 (id=1058): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="48feff00111401002dbd7000fcdbdf251754d92930d9b6c049e54073bb3507db37e4524f8553adf731cbe96b62e3d2b674c06e22ba0bb72f2f2208b3ea03fd5273452a7526ae0943b44f923f48d4f3d8cf394a19e06131487b4bf00041038f1accb00d408fa612b5b4c1a57d2b4ae8cfa7876d8a3b9f94d35e149a8737368b"], 0x48}, 0x1, 0x0, 0x0, 0x2400c8e5}, 0x8054) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1.33258593s ago: executing program 2 (id=1059): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000008c0)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="71b40802000001fe0000000000000000000085000010a0000000950000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.321257173s ago: executing program 4 (id=1060): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xc1646000) r5 = socket(0xa, 0x3, 0x3a) ioctl$SIOCRSGCAUSE(r5, 0x89e0, 0x0) 1.289651788s ago: executing program 1 (id=1061): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbfe, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x800b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c88b170ec34bf61671bc8b7785d3a67bc416da0c6e937594cf57113c45ae3b90b239b7ba282ce1972921362f757ab14f11db5c91bfc6b4d4795778a943896406ea93a6661f657df10b3f84516ca7be8d3e9a119ebcd0ddb1037feebfdba3cb210125e6ef3fe716eed329faa799a430a740634dad0dc20eda760ca084694f14fd8ee843edb7ccc2e3518f0c692b5b7570bb76959ac673514e76bda82b35f2b3b0bfe9f3966698a93c650be0cb910d24fbaae7edb38e5fb67d7866b868c4fa6cfef13abe0ae3"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x26, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5dd36fc9, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.19704111s ago: executing program 2 (id=1063): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) (async) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0x2, 0x4) (async) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}, [0x8, 0x2, 0xffffffffffffffff, 0x8, 0x1, 0x3, 0x3, 0xfffffffffffffffc, 0xf, 0x6, 0x2, 0x3, 0x5, 0x52, 0xfff]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r1, 0x34, "fc112dbe6395fd2b36f4aace2b4ba75308f1dab9943869ee3b2c9fc83402add18c4f7b6f7de9134a3df9d6808b33f1412799db13"}, &(0x7f00000002c0)=0x3c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xb, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x8, 0x2, 0x6, 0x0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @generic={0xe, 0x9, 0x3, 0x0, 0x8}, @ldst={0x3, 0x1, 0x2, 0x9, 0x8, 0x18, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x363}], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x9a, &(0x7f00000003c0)=""/154, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xa, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r0, r0], &(0x7f0000000540)=[{0x1, 0x1, 0x7, 0x6}, {0x5, 0x3, 0x1, 0x1}, {0x5, 0x5, 0x8, 0xc}, {0x0, 0x4, 0x6, 0x4}, {0x1, 0x5, 0x8, 0x5}, {0x2, 0x2, 0xa, 0x3}, {0x3, 0x3, 0xd, 0x3}, {0x1, 0x5, 0x5, 0x1}], 0x10, 0x6}, 0x94) r2 = openat$cgroup_ro(r0, &(0x7f0000000680)='rdma.current\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000006c0)=0x3) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000700)) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, 0x4, 0xa, 0x603, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x67, 0xc, "a4e4c0dc0b995e5b5c4552b21ed912524469e88df26204ee6caa8efd4a08d82f3d2b347fe788cccf0ebaad4c60e50c7916df7702c551341fc08f5c89ef2bf41e053864e36cbc741d21cd1fe3e11f21af164f245144f12b4ee3c0c4ae552e02cc7ec1e7"}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfb5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004014}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x9, 0x5ae4eb7, {{0x14, 0x4, 0x0, 0x1f, 0x50, 0x64, 0x0, 0x3, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x3c, 0xd, 0x3, 0x2, [{@multicast1, 0x80000000}, {@private=0xa010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x6}, {@remote, 0x2}, {@empty, 0x5}, {@multicast1, 0x90}, {@multicast2, 0x2}]}]}}}}}) (async, rerun: 64) pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x10, &(0x7f0000000980)=@raw=[@alu={0x7, 0x0, 0x1, 0x7, 0x0, 0x2, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000a00)='GPL\x00', 0x847, 0x30, &(0x7f0000000a40)=""/48, 0x41000, 0x5, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x5, 0xd, 0x4, 0xffff}, 0x10, 0x1b249, 0xffffffffffffffff, 0x3, &(0x7f0000000bc0)=[0x1, r4], &(0x7f0000000c00)=[{0x3, 0x4, 0xe, 0x4}, {0x1, 0x5, 0xd, 0x2}, {0x3, 0x2, 0x3, 0x2}], 0x10, 0xdca1}, 0x94) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000d00), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000d40)={[{0x2b, 'cpuacct'}, {0x2d, 'cpu'}, {0x2d, 'net'}, {0x2d, 'rdma'}]}, 0x19) (async) clock_gettime(0x0, &(0x7f0000004740)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000004540)=[{{&(0x7f0000000d80)=@phonet, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/136, 0x88}, {&(0x7f0000000ec0)}], 0x2, &(0x7f0000000f40)=""/60, 0x3c}, 0x2}, {{&(0x7f0000000f80)=@nl=@unspec, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)=""/67, 0x43}, {&(0x7f0000001080)=""/79, 0x4f}, {&(0x7f0000001100)=""/38, 0x26}, {&(0x7f0000001140)=""/41, 0x29}, {&(0x7f0000001180)=""/11, 0xb}, {&(0x7f00000011c0)=""/67, 0x43}, {&(0x7f0000001240)=""/122, 0x7a}, {&(0x7f00000012c0)=""/37, 0x25}, {&(0x7f0000001300)=""/42, 0x2a}], 0x9}, 0xff}, {{&(0x7f0000001400)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001480)=""/134, 0x86}, {&(0x7f0000001540)=""/126, 0x7e}, {&(0x7f00000015c0)=""/79, 0x4f}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/203, 0xcb}, {&(0x7f0000001780)=""/64, 0x40}, {&(0x7f00000017c0)=""/19, 0x13}], 0x7}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/205, 0xcd}, {&(0x7f0000001980)=""/251, 0xfb}], 0x2, &(0x7f0000001ac0)=""/45, 0x2d}}, {{&(0x7f0000001b00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001b80)=""/196, 0xc4}, {&(0x7f0000001c80)=""/75, 0x4b}, {&(0x7f0000001d00)=""/143, 0x8f}, {&(0x7f0000001dc0)=""/83, 0x53}, {&(0x7f0000001e40)}], 0x5, &(0x7f0000001f00)=""/12, 0xc}, 0xb1c}, {{&(0x7f0000001f40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003000)=""/183, 0xb7}, 0x7f}, {{&(0x7f00000030c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000004140)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1, &(0x7f0000004180)=""/28, 0x1c}, 0x5}, {{&(0x7f00000041c0)=@l2, 0x80, &(0x7f0000004440)=[{&(0x7f0000004240)=""/21, 0x15}, {&(0x7f0000004280)=""/130, 0x82}, {&(0x7f0000004340)=""/245, 0xf5}], 0x3, &(0x7f0000004480)=""/184, 0xb8}, 0x8}], 0x8, 0x0, &(0x7f0000004780)={r8, r9+10000000}) (async, rerun: 32) r13 = syz_genetlink_get_family_id$team(&(0x7f0000004800), r2) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004f80)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004f40)={&(0x7f0000004840)={0x6ec, r13, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r11}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ef5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r11}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x3, 0x80, 0x2}, {0xa, 0xfd, 0xc9, 0x2fb718d9}, {0x94, 0xe0, 0xb, 0x8000}, {0x2, 0x80}, {0xd9, 0x1, 0x7, 0xb}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffd1}}, {0x8, 0x6, r11}}}]}}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x44010}, 0x40048d6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000005200)={'vcan0\x00', 0x0}) (async) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000052c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r11, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000053c0)={0x11, 0x23, &(0x7f0000004fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @cb_func={0x18, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000005100)='GPL\x00', 0x3, 0x91, &(0x7f0000005140)=""/145, 0x40f00, 0xf, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000005280)={0x1, 0x3, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000005340)=[r15, r0, r5, r5, r5, r5, r5, r4, r2], &(0x7f0000005380)=[{0x5, 0x3, 0x10, 0x7}, {0x2, 0x2, 0xf, 0x4}, {0x3, 0x3, 0x9, 0x1}, {0x0, 0x5, 0xf, 0x4}], 0x10, 0x1}, 0x94) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000054c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005500)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r17, &(0x7f0000005600)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000055c0)={&(0x7f0000005540)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xefd950cc9aed5a05}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048004}, 0x400c005) clock_gettime(0x0, &(0x7f00000056c0)={0x0, 0x0}) ppoll(&(0x7f0000005640)=[{r2}, {r6, 0x4000}, {r2, 0x100}, {r6, 0x10}, {r2, 0x12b8}, {r15, 0x3004}, {r7, 0x100}, {r15, 0x4}, {r16, 0x140}, {}], 0xa, &(0x7f0000005700)={r19, r20+60000000}, &(0x7f0000005740)={[0x93]}, 0x8) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000005880)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005840)={&(0x7f0000005800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040c4}, 0x800) 1.191596949s ago: executing program 4 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r0, 0x0, 0x0, 0xee) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, 0x0}, 0x0) recvfrom(r1, &(0x7f0000000000)=""/132, 0x84, 0x2100, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x2, 0x2, {0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000100)={0x14, r3, 0x301, 0x0, 0x25dfdbff, {0x4e}}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x168, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x70e}, @NL80211_ATTR_FRAME={0x126, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6232}, @device_a, @device_b, @initial, {0x4, 0x3c7}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @val={0x84, 0xef, {0x9, 0xf, [{{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x38}, {{0x0, 0x1}, @device_b, 0xfffffffb, @value, 0xf}, {{}, @broadcast, 0x4, @void, 0x18}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x17}, {{0x0, 0x1}, @broadcast, 0xfffffffa, @value=@device_b, 0x2d}, {{0x0, 0x1}, @broadcast, 0x73fa, @value=@broadcast, 0x33}, {{}, @device_a, 0x8001, @void, 0x1f}, {{}, @broadcast, 0x9, @void, 0x29}, {{}, @broadcast, 0x8, @void, 0x41}, {{}, @device_b, 0x3, @void, 0x22}, {{}, @device_b, 0x7, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0xe3e, @value=@device_b, 0x1a}, {{}, @device_a, 0x6, @void, 0x12}, {{0x0, 0x1}, @device_b, 0xe, @value=@device_b, 0x10}, {{}, @device_b, 0x4, @void, 0x2d}]}}, @val={0x7e, 0x15, {{0x0, 0x2a}, 0x2, 0x35, @broadcast, 0x1, 0xc19e, 0x3}}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x365}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xccb}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x4, 0x0, 0x200, 0xff, 0xc336]}]}, 0x168}}, 0x20000040) 989.645483ms ago: executing program 4 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r2, 0x1, 0x72bd29, 0x400000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x6}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd24, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) 989.326337ms ago: executing program 2 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c00046252f59a0002000000ac14140f000000ffffffff000000000000000099a801007564703a73797a320000000000000000000000000000000000b38b2eac758dbd20b74b10da3cf81c193e84746e3a"], 0x54}}, 0x0) 909.151777ms ago: executing program 2 (id=1068): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000047140007800800084000000017050014000a0000000500010006000000050005000a00000005000400000000000900020073797a31000000000c00030068090000000000000079cad7f742e40e0f3367242b8eea806b91144273e21c0f4dac5c4ab9a72cdd868ae58f1ffb54b01960d36e25bc51dc2ce956b72e508a9cf8f89f8c7a748dfbc6128cc3a8eaec468d224e1423367be1ba2011db5e12a7ec5c3d674c968148cff4a644dd9d69e77b8ad9a81b6c4d2d9f7f798dc39a7386f4"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000080)=0xfff, 0x4) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x80, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd007d966a3e947635e76e1c560ead3e7e55a142dfcdafd3f6ac3b234a726cc"}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x28, 0x5, 0x2e8113f0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r8, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0xf5, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@ipv4_delrule={0x50, 0x21, 0x2, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x10, 0xd, 0x7, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_SRC={0x8, 0x2, @private=0xa010100}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_SRC={0x8, 0x2, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x40400d5}, 0x8c0) 891.135726ms ago: executing program 4 (id=1069): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000160000ff030000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x8}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x2, 0x1, 0x3, 0x6, 0x1, 0xc}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@migrate={0xe8, 0x21, 0x1, 0x0, 0x4, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x2, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@broadcast, 0x0, 0xa}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e20, 0x4e21, @in=@private=0xa010101}}]}, 0xe8}}, 0x0) syz_emit_ethernet(0xe6, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @multicast, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x1, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @private=0xa010102, {[@rr={0x7, 0x1f, 0x69, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101]}]}}, "73288a02b5a7b2a3760f9154d005c4b598e52669f52f6efa55901d9efa87c18738b5de7c2a94353543790cee26e2413e5fc804a7c6254501da0e7b43c3c043fc7481ce85f3db5f3a0d432cea824019f92b8db1b1c35455b5f82bac7433b407b6954ecf06adf8da7776bb031141d513ddfeced5a3dacae238562222c3a75f793b4a210e0f8cdf5667a0637f11577dd49e67857ddd4178679a6bc17099e2c62f8860b4de06"}}}}, &(0x7f0000000240)={0x1, 0x1, [0xdf0, 0x4f2, 0xb68, 0xf92]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2e, 0x25dfdbfc, {0x2, 0x0, 0x49, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, @IFA_FLAGS={0x8, 0x8, 0x700}]}, 0x28}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x8, r5, 0x81, r2}, 0xb) 753.474198ms ago: executing program 3 (id=1070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x30d}]}]}, 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="00000000017c00000400d7002800018006000600800a000008001800", @ANYRES32=0x0, @ANYBLOB="14001900fe80000000000000000000000000001904000280"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0xfffffffc, 0x4) 720.806913ms ago: executing program 0 (id=1071): socket(0x2c, 0xd, 0x9f6) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) (async, rerun: 64) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) (async) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/229, 0xe5}], 0x1}, 0x2002) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x303, 0x39}, '\x00', "0bf70000000000000000061000000001", "00000aed"}, 0x28) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, 0x0, 0x0) 622.588913ms ago: executing program 3 (id=1072): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7c9}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) accept4$inet(r1, 0x0, &(0x7f0000000000), 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept(r1, &(0x7f00000000c0)=@generic, &(0x7f0000000300)=0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000006c0)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) close(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xa5f2, 0x8}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff0300600d698cff9e14f086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000906010800d5000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8008000000000000000000000000bb060004400e1f00000500070037000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000780)={r9, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) 546.150788ms ago: executing program 0 (id=1073): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000010000011f4f7a650dd3000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000140)={0x7, 'veth0_vlan\x00', {0x1000}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x38, r5, 0x11, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014) 397.797893ms ago: executing program 4 (id=1074): r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @float={0x2, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x71, 0x61, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000180)=""/144, 0x37, 0x90, 0x0, 0x54a1, 0x10000, @value=r1}, 0x28) (async) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async, rerun: 64) r2 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) (async) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) (async, rerun: 32) close(r2) (rerun: 32) 396.846448ms ago: executing program 1 (id=1075): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0100001900000200000000fbdbdf25fc010000000000000000000000000001ac1e01010000000000000000000000004e22000bffff00000a00800067000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}}, 0x0) 353.180261ms ago: executing program 1 (id=1076): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'bond_slave_0\x00', &(0x7f0000000b00)=@ethtool_perm_addr={0x4b, 0x12, "43720702b909d4bc4c3f956f18e8fe0252c0"}}) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec6d", 0x3}], 0x1, 0x0, 0x0, 0x20010080}, 0x50) 340.319492ms ago: executing program 0 (id=1077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800060000000000000070001400000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000009000128009000100766c616e00000000800002800600010002000000340003800c00010000000000010001000c000100fdffffff0a0000000c00010000000080020000000c0001000800000008000000400004800c0001004c000000030000000c000100030000000e0c00000c000100ff030000080000000c00010000000000000000000c00010008000000e1c5ffff08000500", @ANYRES32=r1, @ANYBLOB], 0xb8}}, 0x0) 288.212295ms ago: executing program 0 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c00046252f59a0002000000ac14140f000000ffffffff000000000000000099a801007564703a73797a320000000000000000000000000000000000b38b2eac758dbd20b74b10da3cf81c193e84746e3a"], 0x54}}, 0x0) 221.608281ms ago: executing program 4 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000340)="3cd1f360b8118eae19817f567aeb42854fdb447b95c12774b47105771f26a80346f697e50ccf92be147de91c4f0426e122b97a3a1fea556a7b5ec5b38395efa0adc61a53ca368552cbb11ee4e1a80b691315c665166f87fa684995d8b25abb52f9cd71a7aa71d8d94d531539a67d68662f9c330f781a105ff2bbc8287e1c51f2e094cc756697b4a72086db5272b12ada3c98424470b054c9d74c6ab2dd2ae69cc8c867", 0xa3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, r0, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1084, '\x00', 0x0, r5, 0x5, 0x4, 0x5}, 0x50) 221.226235ms ago: executing program 1 (id=1080): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800008058a26cec094e5b00000000800000000000000200000791", @ANYRESHEX=0x0], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="150a00000000000061118c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r3, 0x3, 0x0, @void}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) ioctl$SIOCGETNODEID(r5, 0x89e1, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r9, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@canfd={0xd, {{0x2, 0x1, 0x0, 0x1}, 0x2b, 0x3, 0x0, 0x0, "c2acfcf0a2474d57bfcf5f27a0901b55a7e08044f04853f118444e6cfce98f30230448b6b051f91350aa7a1faeca43bd9ac65aed11a205da75fa071a9f086371"}}}}, &(0x7f0000000280)={0x1, 0x2, [0xcc8, 0xef1, 0x5d2, 0x619]}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="01000200020000de000080000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r2, @ANYBLOB="a0a3d2faff0dd8878df823cc2992d4efeb", @ANYBLOB="6634542e6144ac", @ANYRES16=r0, @ANYRES16=r2, @ANYRESOCT, @ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$phonet(0x23, 0x2, 0x1) sendmmsg(r13, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) sendmsg(r13, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r1, 0x25, 0x0, @void}, 0x10) 188.080142ms ago: executing program 0 (id=1081): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x6c, 0x66, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x6, 0x1}, {0xfff2, 0x6}, {0x4, 0x9}}, [{0x8, 0xb, 0xffff8000}, {0x8, 0xb, 0x10}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1fa}, {0x8}, {0x8, 0xb, 0x1}, {0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=1082): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000fc0)="488c534e9f56", 0x0}, 0x20) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x5) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000000)=0x23b8f613, 0x4) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 68.648857][ T5819] cgroup: Unknown subsys name 'net' [ 68.798149][ T5819] cgroup: Unknown subsys name 'cpuset' [ 68.806836][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.168906][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.318897][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325327][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.161566][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.184674][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.194860][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.203100][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.211595][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.219686][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.220686][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.228398][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.241517][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.241974][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.256541][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.257865][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.264572][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.271822][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.279456][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.292135][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.300022][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.306028][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.308137][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.314891][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.321395][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.336202][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.344256][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.354012][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.361745][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.837602][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 73.057686][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 73.119892][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 73.131780][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.139731][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.147211][ T5830] bridge_slave_0: entered allmulticast mode [ 73.154765][ T5830] bridge_slave_0: entered promiscuous mode [ 73.190834][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.198246][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.206299][ T5830] bridge_slave_1: entered allmulticast mode [ 73.213179][ T5830] bridge_slave_1: entered promiscuous mode [ 73.261143][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 73.305542][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 73.333508][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.373188][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.400084][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.407323][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.414441][ T5833] bridge_slave_0: entered allmulticast mode [ 73.421609][ T5833] bridge_slave_0: entered promiscuous mode [ 73.461600][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.469447][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.477552][ T5833] bridge_slave_1: entered allmulticast mode [ 73.484404][ T5833] bridge_slave_1: entered promiscuous mode [ 73.531427][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.538894][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.546154][ T5829] bridge_slave_0: entered allmulticast mode [ 73.553103][ T5829] bridge_slave_0: entered promiscuous mode [ 73.562428][ T5830] team0: Port device team_slave_0 added [ 73.587531][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.595179][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.602638][ T5829] bridge_slave_1: entered allmulticast mode [ 73.609763][ T5829] bridge_slave_1: entered promiscuous mode [ 73.617811][ T5830] team0: Port device team_slave_1 added [ 73.639780][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.692551][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.721796][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.729612][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.737265][ T5832] bridge_slave_0: entered allmulticast mode [ 73.744170][ T5832] bridge_slave_0: entered promiscuous mode [ 73.773165][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.783475][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.790553][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.817125][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.828881][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.836123][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.843255][ T5832] bridge_slave_1: entered allmulticast mode [ 73.850546][ T5832] bridge_slave_1: entered promiscuous mode [ 73.857448][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.864569][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.872066][ T5834] bridge_slave_0: entered allmulticast mode [ 73.879442][ T5834] bridge_slave_0: entered promiscuous mode [ 73.898730][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.912445][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.919643][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.945549][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.972776][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.979916][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.987122][ T5834] bridge_slave_1: entered allmulticast mode [ 73.994463][ T5834] bridge_slave_1: entered promiscuous mode [ 74.002622][ T5833] team0: Port device team_slave_0 added [ 74.031497][ T5829] team0: Port device team_slave_0 added [ 74.061995][ T5833] team0: Port device team_slave_1 added [ 74.078717][ T5829] team0: Port device team_slave_1 added [ 74.087146][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.138516][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.149893][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.159890][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.167426][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.193352][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.236380][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.246221][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.253145][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.279145][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.295232][ T5830] hsr_slave_0: entered promiscuous mode [ 74.301644][ T5830] hsr_slave_1: entered promiscuous mode [ 74.308927][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.316112][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.342412][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.355963][ T52] Bluetooth: hci3: command tx timeout [ 74.355995][ T5841] Bluetooth: hci0: command tx timeout [ 74.361619][ T5847] Bluetooth: hci2: command tx timeout [ 74.393306][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.400411][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.426798][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.439994][ T5832] team0: Port device team_slave_0 added [ 74.445230][ T5847] Bluetooth: hci1: command tx timeout [ 74.445604][ T5841] Bluetooth: hci4: command tx timeout [ 74.478154][ T5832] team0: Port device team_slave_1 added [ 74.486714][ T5834] team0: Port device team_slave_0 added [ 74.524438][ T5834] team0: Port device team_slave_1 added [ 74.583125][ T5833] hsr_slave_0: entered promiscuous mode [ 74.589716][ T5833] hsr_slave_1: entered promiscuous mode [ 74.596275][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 74.602061][ T5833] Cannot create hsr debugfs directory [ 74.618937][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.625980][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.651917][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.689930][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.696903][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.723358][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.737907][ T5829] hsr_slave_0: entered promiscuous mode [ 74.744108][ T5829] hsr_slave_1: entered promiscuous mode [ 74.750245][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 74.756061][ T5829] Cannot create hsr debugfs directory [ 74.763180][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.771140][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.798328][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.831202][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.838849][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.865301][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.020567][ T5832] hsr_slave_0: entered promiscuous mode [ 75.027414][ T5832] hsr_slave_1: entered promiscuous mode [ 75.033389][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 75.039284][ T5832] Cannot create hsr debugfs directory [ 75.087484][ T5834] hsr_slave_0: entered promiscuous mode [ 75.093776][ T5834] hsr_slave_1: entered promiscuous mode [ 75.099941][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 75.106421][ T5834] Cannot create hsr debugfs directory [ 75.400132][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.429193][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.439442][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.460120][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.519342][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.529998][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.541092][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.562867][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.614785][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.626577][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.651008][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.662777][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.740570][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.767639][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.777564][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.791156][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.876843][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.896280][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.916132][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.928405][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.941857][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.027787][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.056356][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.078896][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.086154][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.098014][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.105179][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.147151][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.179020][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.212609][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.219764][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.243911][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.263027][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.270147][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.296766][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.303857][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.331082][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.354361][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.388962][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.396125][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.435485][ T5841] Bluetooth: hci0: command tx timeout [ 76.435508][ T52] Bluetooth: hci3: command tx timeout [ 76.448032][ T5847] Bluetooth: hci2: command tx timeout [ 76.454521][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.466500][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.510395][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.520464][ T52] Bluetooth: hci1: command tx timeout [ 76.526354][ T5847] Bluetooth: hci4: command tx timeout [ 76.538056][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.575658][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.582820][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.598401][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.605584][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.627404][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.634563][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.657317][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.664471][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.700234][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.947592][ T5830] veth0_vlan: entered promiscuous mode [ 76.967895][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.989553][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.001652][ T5830] veth1_vlan: entered promiscuous mode [ 77.170793][ T5830] veth0_macvtap: entered promiscuous mode [ 77.210661][ T5830] veth1_macvtap: entered promiscuous mode [ 77.237221][ T5829] veth0_vlan: entered promiscuous mode [ 77.248482][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.297967][ T5829] veth1_vlan: entered promiscuous mode [ 77.332170][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.381493][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.414667][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.429768][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.467409][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.477651][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.521838][ T5829] veth0_macvtap: entered promiscuous mode [ 77.543619][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.552841][ T5834] veth0_vlan: entered promiscuous mode [ 77.581007][ T5829] veth1_macvtap: entered promiscuous mode [ 77.640451][ T5834] veth1_vlan: entered promiscuous mode [ 77.647960][ T5833] veth0_vlan: entered promiscuous mode [ 77.663625][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.676259][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.701782][ T5833] veth1_vlan: entered promiscuous mode [ 77.710739][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.754689][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.756255][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.776125][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.779776][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.794448][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.811755][ T1142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.833411][ T1142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.866865][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.869861][ T5834] veth0_macvtap: entered promiscuous mode [ 77.903264][ T5832] veth0_vlan: entered promiscuous mode [ 77.917287][ T5834] veth1_macvtap: entered promiscuous mode [ 77.950037][ T5832] veth1_vlan: entered promiscuous mode [ 77.995905][ T5833] veth0_macvtap: entered promiscuous mode [ 78.044926][ T5833] veth1_macvtap: entered promiscuous mode [ 78.083956][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.105867][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.129649][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.149475][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.174633][ T5951] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 78.185536][ T5951] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6'. [ 78.194310][ T5951] block nbd0: not configured, cannot reconfigure [ 78.201767][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.201788][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.219375][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.231107][ T5952] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 78.242027][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.252584][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.269698][ T5951] bridge_slave_0: left allmulticast mode [ 78.275666][ T5951] bridge_slave_0: left promiscuous mode [ 78.281632][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.294484][ T5951] bridge_slave_1: left allmulticast mode [ 78.301386][ T5951] bridge_slave_1: left promiscuous mode [ 78.310778][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.325977][ T5951] bond0: (slave bond_slave_0): Releasing backup interface [ 78.338162][ T5951] bond0: (slave bond_slave_1): Releasing backup interface [ 78.351754][ T5951] team0: Port device team_slave_0 removed [ 78.362628][ T5951] team0: Port device team_slave_1 removed [ 78.370403][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.378088][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.387237][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.394631][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.406137][ T5951] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.428689][ T5952] team0: Port device dummy0 added [ 78.438946][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.450194][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.473738][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.486469][ T5832] veth0_macvtap: entered promiscuous mode [ 78.516859][ T5847] Bluetooth: hci3: command tx timeout [ 78.518131][ T5841] Bluetooth: hci2: command tx timeout [ 78.522312][ T52] Bluetooth: hci0: command tx timeout [ 78.595136][ T52] Bluetooth: hci4: command tx timeout [ 78.600910][ T5847] Bluetooth: hci1: command tx timeout [ 78.609148][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.635717][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.654137][ T5832] veth1_macvtap: entered promiscuous mode [ 78.660291][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.679551][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.700560][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.730253][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.740231][ T5962] Zero length message leads to an empty skb [ 78.791111][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.851780][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 78.852883][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.887489][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 78.898473][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.920033][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.948203][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.959191][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.980611][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.996505][ T192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.071096][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 79.101950][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.116981][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.178957][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.219887][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.380411][ T3694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.399529][ T3694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.433011][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.459587][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.583017][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 79.657329][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.674216][ T5994] netlink: 'syz.2.15': attribute type 2 has an invalid length. [ 79.690411][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.750088][ T5994] : entered promiscuous mode [ 79.920762][ T5996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.596214][ T52] Bluetooth: hci0: command tx timeout [ 80.602302][ T5847] Bluetooth: hci3: command tx timeout [ 80.608580][ T52] Bluetooth: hci2: command tx timeout [ 80.609183][ T6027] dummy0: entered promiscuous mode [ 80.675744][ T52] Bluetooth: hci4: command tx timeout [ 80.681320][ T5847] Bluetooth: hci1: command tx timeout [ 80.698144][ T6027] dummy0: left promiscuous mode [ 80.899101][ T6010] ip6gretap1: entered promiscuous mode [ 81.060516][ T6040] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 81.088041][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 81.313144][ T6051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.26'. [ 82.177951][ T6075] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 82.227620][ T6079] netlink: 'syz.1.34': attribute type 3 has an invalid length. [ 82.237793][ T6079] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 82.246313][ T6079] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.34'. [ 82.509042][ T6084] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 82.550601][ T6084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.37'. [ 82.651788][ T6084] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 82.900131][ T6109] netlink: 'syz.2.43': attribute type 11 has an invalid length. [ 82.901130][ T5928] hid-generic 0005:16C0:05DF.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 83.519549][ T6135] warning: `syz.4.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.723051][ T6146] syzkaller0: entered promiscuous mode [ 83.757599][ T6146] syzkaller0: entered allmulticast mode [ 84.263319][ T6163] __nla_validate_parse: 4 callbacks suppressed [ 84.263336][ T6163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 84.361241][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 84.375265][ T6168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.59'. [ 84.406555][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 84.432536][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 84.494664][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.502478][ T6174] netlink: 156 bytes leftover after parsing attributes in process `syz.0.62'. [ 84.566821][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.600029][ T6174] netlink: 156 bytes leftover after parsing attributes in process `syz.0.62'. [ 84.609654][ T6177] syzkaller0: entered promiscuous mode [ 84.619393][ T6177] syzkaller0: entered allmulticast mode [ 84.630984][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.645251][ T6174] netlink: 156 bytes leftover after parsing attributes in process `syz.0.62'. [ 84.663351][ T6184] netlink: 4092 bytes leftover after parsing attributes in process `syz.2.65'. [ 84.685703][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.693466][ T6174] netlink: 156 bytes leftover after parsing attributes in process `syz.0.62'. [ 84.711343][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.721015][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.729768][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.739745][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.749072][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.768837][ T6174] netlink: 'syz.0.62': attribute type 21 has an invalid length. [ 84.845881][ T6190] syz.4.67 uses obsolete (PF_INET,SOCK_PACKET) [ 85.205261][ T6204] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.290951][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.301020][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.314592][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.331889][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.646148][ T6220] batadv1: entered promiscuous mode [ 86.134700][ T6231] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 86.479530][ T6243] syzkaller0: entered promiscuous mode [ 86.495797][ T6243] syzkaller0: entered allmulticast mode [ 86.521415][ T6248] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 86.680162][ T48] cfg80211: failed to load regulatory.db [ 86.753803][ T6256] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 86.964669][ T6264] NFSD: Failed to start, no listeners configured. [ 86.981928][ T6266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.507316][ T6307] xt_CT: No such helper "snmp_trap" [ 88.583151][ T6307] netlink: 'syz.0.103': attribute type 11 has an invalid length. [ 88.593053][ T6318] veth3: entered promiscuous mode [ 88.605943][ T6307] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 88.619972][ T6307] syzkaller1: linktype set to 260 [ 89.317190][ T6372] tipc: Started in network mode [ 89.346178][ T6372] tipc: Node identity d62a881a6904, cluster identity 4711 [ 89.361385][ T6372] tipc: Enabled bearer , priority 0 [ 89.375833][ T6376] syzkaller0: entered promiscuous mode [ 89.396159][ T6376] syzkaller0: entered allmulticast mode [ 89.544335][ T6376] tipc: Resetting bearer [ 89.589674][ T6371] tipc: Resetting bearer [ 89.609379][ T6371] tipc: Disabling bearer [ 89.626690][ T6388] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 89.633851][ T6378] __nla_validate_parse: 82 callbacks suppressed [ 89.633867][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.123'. [ 90.391452][ T6428] netlink: 36 bytes leftover after parsing attributes in process `syz.3.133'. [ 90.411205][ T6431] x_tables: duplicate underflow at hook 1 [ 90.454208][ T6431] No such timeout policy "syz1" [ 90.462020][ T6428] validate_nla: 62 callbacks suppressed [ 90.462038][ T6428] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 90.465108][ T6432] No such timeout policy "syz1" [ 90.475234][ T6428] netlink: 224 bytes leftover after parsing attributes in process `syz.3.133'. [ 90.542801][ T6428] vxcan2: entered allmulticast mode [ 90.680526][ T6443] netlink: 'syz.2.137': attribute type 12 has an invalid length. [ 90.854872][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 90.908587][ T6452] block nbd0: not configured, cannot reconfigure [ 90.915762][ T6452] netlink: 44 bytes leftover after parsing attributes in process `syz.2.141'. [ 91.121899][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 91.133431][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 91.144673][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 91.171235][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 91.199739][ T6448] netlink: 'syz.3.140': attribute type 3 has an invalid length. [ 91.222117][ T6448] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 91.236619][ T6448] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.140'. [ 91.326166][ T6470] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 91.495006][ T6482] batadv0: mtu less than device minimum [ 92.219683][ T6496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.611012][ T6520] netlink: 'syz.0.157': attribute type 27 has an invalid length. [ 92.635332][ T6520] netlink: 'syz.0.157': attribute type 4 has an invalid length. [ 92.657266][ T6522] netlink: 'syz.4.161': attribute type 83 has an invalid length. [ 93.315551][ T52] Bluetooth: hci0: command 0x0401 tx timeout [ 93.565514][ T6546] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.644147][ T6548] team0: entered promiscuous mode [ 93.658603][ T6548] team_slave_0: entered promiscuous mode [ 93.669784][ T6548] team_slave_1: entered promiscuous mode [ 93.686592][ T6548] team0: entered allmulticast mode [ 93.691748][ T6548] team_slave_0: entered allmulticast mode [ 93.698611][ T6548] team_slave_1: entered allmulticast mode [ 93.713889][ T6548] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 93.957153][ T6571] Bluetooth: MGMT ver 1.23 [ 94.116666][ T6575] bridge1: entered promiscuous mode [ 94.122015][ T6575] bridge1: entered allmulticast mode [ 94.819131][ T6612] netlink: 'syz.3.185': attribute type 6 has an invalid length. [ 94.916889][ T6612] __nla_validate_parse: 10 callbacks suppressed [ 94.916909][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.185'. [ 94.929464][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 94.971356][ T30] audit: type=1800 audit(1767276946.492:2): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.181" name="memory.events" dev="tmpfs" ino=209 res=0 errno=0 [ 95.316348][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 95.523411][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 96.188983][ T6674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'. [ 96.406710][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 96.416797][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 96.427163][ T6692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.536331][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 96.554601][ T6698] netlink: 'syz.3.208': attribute type 29 has an invalid length. [ 96.563137][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 96.599900][ T6701] NFSD: Failed to start, no listeners configured. [ 96.696361][ T6710] netlink: zone id is out of range [ 96.701639][ T6710] netlink: zone id is out of range [ 96.740576][ T6710] netlink: zone id is out of range [ 96.762097][ T6710] netlink: zone id is out of range [ 96.775981][ T6710] netlink: zone id is out of range [ 96.785412][ T6710] netlink: zone id is out of range [ 96.791360][ T6710] netlink: zone id is out of range [ 96.914246][ T6717] trusted_key: syz.4.213 sent an empty control message without MSG_MORE. [ 97.198754][ T6740] : renamed from bond_slave_0 (while UP) [ 97.249329][ T6740] IPv6: sit1: Disabled Multicast RS [ 97.527964][ T6758] net_ratelimit: 4 callbacks suppressed [ 97.527981][ T6758] sock: sock_set_timeout: `syz.0.227' (pid 6758) tries to set negative timeout [ 97.583080][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.229'. [ 97.656724][ T6767] nbd: socks must be embedded in a SOCK_ITEM attr [ 97.720480][ T6778] netlink: 'syz.1.230': attribute type 11 has an invalid length. [ 97.768786][ T6778] netlink: 'syz.1.230': attribute type 11 has an invalid length. [ 97.987897][ T6790] pim6reg1: entered promiscuous mode [ 98.002706][ T6790] pim6reg1: entered allmulticast mode [ 98.056373][ T6787] batman_adv: batadv0: Adding interface: vlan3 [ 98.062745][ T6787] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.097996][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.110177][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.120533][ T6787] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 98.190468][ T6806] lo speed is unknown, defaulting to 1000 [ 98.203821][ T6806] lo speed is unknown, defaulting to 1000 [ 98.217583][ T6806] lo speed is unknown, defaulting to 1000 [ 98.240904][ T6806] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.276305][ T6806] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.365169][ T6806] lo speed is unknown, defaulting to 1000 [ 98.390485][ T6806] lo speed is unknown, defaulting to 1000 [ 98.410698][ T6806] lo speed is unknown, defaulting to 1000 [ 98.420498][ T6806] lo speed is unknown, defaulting to 1000 [ 98.438656][ T6806] lo speed is unknown, defaulting to 1000 [ 98.592674][ T6832] xt_hashlimit: max too large, truncated to 1048576 [ 98.762603][ T6844] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 98.791082][ T6844] bond1: entered promiscuous mode [ 98.809870][ T6844] bridge3: entered promiscuous mode [ 98.816018][ T6844] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 99.568236][ T6876] syzkaller0: entered promiscuous mode [ 99.573927][ T6876] syzkaller0: entered allmulticast mode [ 99.594787][ T6872] Bluetooth: MGMT ver 1.23 [ 99.646666][ T6876] tipc: Started in network mode [ 99.662231][ T6876] tipc: Node identity 16d0eea956b9, cluster identity 4711 [ 99.676778][ T6876] tipc: Enabled bearer , priority 0 [ 99.708577][ T6883] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 99.723101][ T6876] tipc: Resetting bearer [ 99.750050][ T6871] tipc: Resetting bearer [ 99.786633][ T6871] tipc: Disabling bearer [ 99.827048][ T6879] lo speed is unknown, defaulting to 1000 [ 99.878404][ T6888] netlink: 'syz.1.261': attribute type 10 has an invalid length. [ 99.923341][ T6888] dummy0: entered promiscuous mode [ 99.928939][ T6888] dummy0: entered allmulticast mode [ 99.937259][ T6888] team0: Port device dummy0 added [ 99.959721][ T6888] dummy0: left promiscuous mode [ 99.967589][ T6888] dummy0: left allmulticast mode [ 99.978757][ T6888] team0: Port device dummy0 removed [ 99.994123][ T6888] bridge_slave_0: left allmulticast mode [ 100.001147][ T6893] __nla_validate_parse: 5 callbacks suppressed [ 100.001163][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 100.001223][ T6888] bridge_slave_0: left promiscuous mode [ 100.030173][ T6889] x_tables: duplicate underflow at hook 1 [ 100.041721][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.054204][ T6888] bridge_slave_1: left allmulticast mode [ 100.060873][ T6888] bridge_slave_1: left promiscuous mode [ 100.067180][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.083624][ T6891] cgroup: fork rejected by pids controller in /syz3 [ 100.093007][ T6888] bond0: (slave bond_slave_0): Releasing backup interface [ 100.108349][ T6888] bond0: (slave bond_slave_1): Releasing backup interface [ 100.141496][ T6888] team_slave_0: left promiscuous mode [ 100.150650][ T6888] team_slave_0: left allmulticast mode [ 100.163587][ T6888] team0: Port device team_slave_0 removed [ 100.171655][ T6888] team_slave_1: left promiscuous mode [ 100.179004][ T6888] team_slave_1: left allmulticast mode [ 100.191235][ T6888] team0: Port device team_slave_1 removed [ 100.198351][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.206335][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.217397][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.224778][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.234004][ T6888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.571664][ T7010] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 100.681101][ T7003] netlink: 'syz.1.264': attribute type 2 has an invalid length. [ 100.760575][ T7020] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 101.093674][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.180742][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.274312][ T7040] netlink: 256 bytes leftover after parsing attributes in process `syz.0.273'. [ 101.301268][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.335259][ T7037] netlink: 'syz.4.276': attribute type 2 has an invalid length. [ 101.352345][ T7041] netlink: 168 bytes leftover after parsing attributes in process `syz.2.275'. [ 101.356543][ T7046] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 101.419511][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.431304][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.440851][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.450854][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.461404][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.470232][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.273'. [ 101.556254][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.595911][ T7048] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.610136][ T7048] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 101.636572][ T7040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.657325][ T7055] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 101.714708][ T7049] lo speed is unknown, defaulting to 1000 [ 101.857891][ T7063] IPv6: sit1: Disabled Multicast RS [ 101.862256][ T7065] netlink: 80 bytes leftover after parsing attributes in process `syz.0.277'. [ 101.866265][ T36] bridge_slave_1: left allmulticast mode [ 101.879704][ T36] bridge_slave_1: left promiscuous mode [ 101.886919][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.900517][ T36] bridge_slave_0: left allmulticast mode [ 101.908056][ T36] bridge_slave_0: left promiscuous mode [ 101.913921][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.024383][ T7070] netlink: 76 bytes leftover after parsing attributes in process `syz.0.280'. [ 102.419143][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.430633][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.440739][ T36] bond0 (unregistering): Released all slaves [ 102.461435][ T7070] netlink: 52 bytes leftover after parsing attributes in process `syz.0.280'. [ 102.522241][ T7080] lo speed is unknown, defaulting to 1000 [ 102.702494][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'. [ 102.973657][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 103.013914][ T794] IPVS: starting estimator thread 0... [ 103.125871][ T7115] IPVS: using max 30 ests per chain, 72000 per kthread [ 103.177478][ T7109] syzkaller0: entered promiscuous mode [ 103.191670][ T7109] syzkaller0: entered allmulticast mode [ 103.245807][ T7124] netlink: 'syz.1.292': attribute type 12 has an invalid length. [ 103.279409][ T7124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.292'. [ 103.313919][ T7131] netlink: 'syz.1.292': attribute type 30 has an invalid length. [ 103.334686][ T7049] chnl_net:caif_netlink_parms(): no params data found [ 103.419882][ T7131] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 103.433079][ T7131] bond1 (unregistering): Released all slaves [ 103.464034][ T36] hsr_slave_0: left promiscuous mode [ 103.474903][ T36] hsr_slave_1: left promiscuous mode [ 103.514162][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.538805][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.555952][ T5847] Bluetooth: hci4: command tx timeout [ 103.747368][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.754793][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.857158][ T36] batman_adv: batadv0: Removing interface: vlan3 [ 103.910468][ T36] veth1_macvtap: left promiscuous mode [ 103.916627][ T36] veth0_macvtap: left promiscuous mode [ 103.922663][ T36] veth1_vlan: left promiscuous mode [ 103.941691][ T36] veth0_vlan: left promiscuous mode [ 104.536042][ T36] team0 (unregistering): Port device team_slave_1 removed [ 104.575849][ T36] team0 (unregistering): Port device team_slave_0 removed [ 105.230438][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.255673][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.262649][ T7157] netlink: 'syz.2.298': attribute type 33 has an invalid length. [ 105.265219][ T7049] bridge_slave_0: entered allmulticast mode [ 105.295094][ T7157] __nla_validate_parse: 2 callbacks suppressed [ 105.295113][ T7157] netlink: 152 bytes leftover after parsing attributes in process `syz.2.298'. [ 105.317028][ T7049] bridge_slave_0: entered promiscuous mode [ 105.336688][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.343895][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.351435][ T7049] bridge_slave_1: entered allmulticast mode [ 105.371773][ T7049] bridge_slave_1: entered promiscuous mode [ 105.489785][ T7165] tc_dump_action: action bad kind [ 105.504387][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.514324][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 105.542269][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 105.553313][ T7160] lo speed is unknown, defaulting to 1000 [ 105.559917][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.636352][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 105.645769][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 105.652117][ T5847] Bluetooth: hci4: command tx timeout [ 105.721593][ T7049] team0: Port device team_slave_0 added [ 105.758331][ T7049] team0: Port device team_slave_1 added [ 105.870699][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.882652][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.929023][ T7049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.029154][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.036414][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.095055][ T7049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.114751][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'. [ 106.143811][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 106.316082][ T7049] hsr_slave_0: entered promiscuous mode [ 106.326602][ T7049] hsr_slave_1: entered promiscuous mode [ 106.335911][ T7049] debugfs: 'hsr0' already exists in 'hsr' [ 106.341665][ T7049] Cannot create hsr debugfs directory [ 106.872476][ T7217] netlink: 'syz.1.312': attribute type 5 has an invalid length. [ 107.165985][ T7223] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.315'. [ 107.188453][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 107.224067][ T7223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.328364][ T7223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.447891][ T7049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.459694][ T7049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.471198][ T7049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.509816][ T7049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.602202][ T7245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.318'. [ 107.664910][ T7248] syzkaller1: entered promiscuous mode [ 107.676296][ T7248] syzkaller1: entered allmulticast mode [ 107.715378][ T5847] Bluetooth: hci4: command tx timeout [ 107.755810][ T7246] lo speed is unknown, defaulting to 1000 [ 107.854426][ T7049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.868526][ T7250] syzkaller0: entered promiscuous mode [ 107.874504][ T7250] syzkaller0: entered allmulticast mode [ 108.062220][ T7261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.107355][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.324'. [ 108.122119][ T7049] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.181017][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.188245][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.236651][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.243861][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.341587][ T7272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.327'. [ 108.352348][ T7269] lo speed is unknown, defaulting to 1000 [ 108.357476][ T7049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.599209][ T7282] netlink: 'syz.0.329': attribute type 58 has an invalid length. [ 108.662201][ T7049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.792602][ T7049] veth0_vlan: entered promiscuous mode [ 108.850443][ T7049] veth1_vlan: entered promiscuous mode [ 108.929714][ T7293] lo speed is unknown, defaulting to 1000 [ 109.049610][ T7049] veth0_macvtap: entered promiscuous mode [ 109.122238][ T7049] veth1_macvtap: entered promiscuous mode [ 109.260744][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.322954][ T7049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.413687][ T3454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.449023][ T3454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.509195][ T3454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.571365][ T3454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.809135][ T5847] Bluetooth: hci4: command tx timeout [ 110.072201][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.086048][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.154205][ T7334] lo speed is unknown, defaulting to 1000 [ 110.278870][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.294597][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.428505][ T7341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.446836][ T7341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.479525][ T7352] tipc: Enabling of bearer rejected, failed to enable media [ 110.679244][ T7341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.754428][ T7341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.902699][ T7341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.925104][ T7341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.177792][ T7341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.205476][ T7341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.392951][ T7400] lo speed is unknown, defaulting to 1000 [ 111.395520][ T7405] netlink: 'syz.2.354': attribute type 4 has an invalid length. [ 111.442774][ T7405] __nla_validate_parse: 4 callbacks suppressed [ 111.442791][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.354'. [ 111.502144][ T7408] netlink: 256 bytes leftover after parsing attributes in process `syz.2.354'. [ 111.520822][ T7404] xt_CT: No such helper "netbios-ns" [ 111.546175][ T3694] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.554385][ T3694] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.615803][ T3694] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.624428][ T3694] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.660366][ T3694] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.669109][ T3694] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.690603][ T3694] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.709301][ T3694] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.898004][ T7417] netlink: 44 bytes leftover after parsing attributes in process `syz.2.356'. [ 111.916039][ T7417] netlink: 51 bytes leftover after parsing attributes in process `syz.2.356'. [ 111.941673][ T7417] netlink: 'syz.2.356': attribute type 6 has an invalid length. [ 111.951333][ T7417] netlink: 51 bytes leftover after parsing attributes in process `syz.2.356'. [ 112.063065][ T7424] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 112.098933][ T7424] x_tables: duplicate underflow at hook 1 [ 112.187823][ T7424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.484826][ T7424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.654778][ T7424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.847601][ T7424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.056797][ T69] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.092830][ T69] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.152811][ T3747] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.184016][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.367824][ T7487] bridge1: left promiscuous mode [ 113.392192][ T7487] bond1: left promiscuous mode [ 113.404900][ T7487] bridge3: left promiscuous mode [ 113.417889][ T7483] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.374'. [ 113.464051][ T7488] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 113.594866][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.378'. [ 113.607286][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.378'. [ 113.666941][ T7506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.378'. [ 113.693976][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.378'. [ 113.838715][ T7510] syzkaller0: entered promiscuous mode [ 113.844266][ T7510] syzkaller0: entered allmulticast mode [ 114.137754][ T6066] IPVS: starting estimator thread 0... [ 114.150803][ T7523] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 114.237839][ T7524] IPVS: using max 26 ests per chain, 62400 per kthread [ 114.527794][ T7547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.871586][ T7555] lo speed is unknown, defaulting to 1000 [ 115.774324][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.784599][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.794619][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.804828][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.074061][ T7614] IPv6: addrconf: prefix option has invalid lifetime [ 116.414815][ T7623] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 116.435536][ T7623] NCSI netlink: No device for ifindex 0 [ 116.441413][ T7622] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 116.450170][ T7623] x_tables: duplicate underflow at hook 1 [ 116.457597][ T7622] __nla_validate_parse: 10 callbacks suppressed [ 116.457616][ T7622] netlink: 224 bytes leftover after parsing attributes in process `syz.0.416'. [ 116.475254][ T7622] NCSI netlink: No device for ifindex 0 [ 116.513438][ T7623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.533807][ T7624] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.626734][ T7623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.733279][ T7628] tipc: Enabled bearer , priority 0 [ 116.826956][ T7623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.862079][ T7628] tipc: Disabling bearer [ 116.919973][ T7623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.973246][ T7634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.420'. [ 117.088031][ T1339] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.119032][ T1339] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.138079][ T1339] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.173570][ T1339] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.208972][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 117.238515][ T7648] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 117.286445][ T7653] nbd: couldn't find device at index 0 [ 117.342760][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 117.465617][ T1217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 117.489735][ T7666] syzkaller1: entered promiscuous mode [ 117.505845][ T7666] syzkaller1: entered allmulticast mode [ 117.696944][ T7684] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 117.727812][ T7687] tipc: Enabling of bearer rejected, failed to enable media [ 117.757947][ T7688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.765451][ T7688] IPv6: NLM_F_CREATE should be set when creating new route [ 117.772761][ T7688] IPv6: NLM_F_CREATE should be set when creating new route [ 117.782511][ T7688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.819123][ T7689] sit2: entered promiscuous mode [ 118.007139][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 118.115519][ T3454] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 118.427611][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 118.437172][ T1217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 118.447560][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 118.449883][ T7700] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 118.611670][ T7708] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.611670][ T7707] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.729366][ T7711] syzkaller0: entered promiscuous mode [ 118.735065][ T7711] syzkaller0: entered allmulticast mode [ 118.823669][ T7711] lo speed is unknown, defaulting to 1000 [ 118.840413][ T7715] netlink: 56 bytes leftover after parsing attributes in process `syz.4.441'. [ 118.962334][ T7715] lo speed is unknown, defaulting to 1000 [ 119.157565][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.178927][ T50] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.334461][ T7734] lo speed is unknown, defaulting to 1000 [ 119.346886][ T7742] netlink: 'syz.1.449': attribute type 11 has an invalid length. [ 119.369287][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 119.467285][ T1217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.810785][ T7753] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.949962][ T7750] netlink: 156 bytes leftover after parsing attributes in process `syz.1.452'. [ 119.986695][ T7753] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.048882][ T7753] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.128936][ T7753] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.222798][ T7757] lo speed is unknown, defaulting to 1000 [ 120.358581][ T69] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.551839][ T1339] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.664281][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.707979][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.923201][ T7775] netlink: 'syz.1.460': attribute type 3 has an invalid length. [ 121.097646][ T7779] syzkaller0: entered promiscuous mode [ 121.121441][ T7779] syzkaller0: entered allmulticast mode [ 121.187783][ T7779] tipc: Started in network mode [ 121.192706][ T7779] tipc: Node identity 76cad776f3fc, cluster identity 4711 [ 121.208039][ T7779] tipc: Enabled bearer , priority 0 [ 121.560574][ T7791] bond2 (unregistering): Released all slaves [ 121.907239][ T7778] tipc: Resetting bearer [ 121.996491][ T7807] openvswitch: netlink: Multiple metadata blocks provided [ 122.006652][ T7808] openvswitch: netlink: Multiple metadata blocks provided [ 122.070199][ T7778] tipc: Disabling bearer [ 122.275338][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 122.328760][ T7802] __nla_validate_parse: 4 callbacks suppressed [ 122.328779][ T7802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.465'. [ 122.974772][ T7818] lo speed is unknown, defaulting to 1000 [ 123.063111][ T7824] tipc: Enabled bearer , priority 0 [ 123.075285][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.104495][ T7827] syzkaller0: entered promiscuous mode [ 123.110235][ T7827] syzkaller0: entered allmulticast mode [ 123.193122][ T7827] tipc: Resetting bearer [ 123.383663][ T7828] lo speed is unknown, defaulting to 1000 [ 123.395293][ T7842] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 123.789751][ T7821] tipc: Resetting bearer [ 123.905896][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.476'. [ 123.954175][ T7821] tipc: Disabling bearer [ 123.976534][ T7854] xt_TCPMSS: Only works on TCP SYN packets [ 123.993650][ T7854] netlink: 'syz.3.478': attribute type 13 has an invalid length. [ 124.401702][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.409554][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.540127][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 124.640586][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.665969][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.784912][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f4d3000: rx timeout, send abort [ 124.928342][ T5965] tipc: Node number set to 2234963830 [ 124.988758][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.122844][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.158223][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.248736][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.317664][ T7905] batadv1: entered promiscuous mode [ 125.408090][ T7910] netlink: 296 bytes leftover after parsing attributes in process `syz.1.491'. [ 125.426185][ T7911] netlink: 32 bytes leftover after parsing attributes in process `syz.4.490'. [ 125.442616][ T7913] netlink: 'syz.1.491': attribute type 3 has an invalid length. [ 125.462098][ T7913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.491'. [ 125.684904][ T7924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.707992][ T7905] lo speed is unknown, defaulting to 1000 [ 125.829398][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 125.838453][ T7924] netlink: 64 bytes leftover after parsing attributes in process `syz.1.494'. [ 125.889485][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 125.945209][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 126.216517][ T7942] lo speed is unknown, defaulting to 1000 [ 127.113897][ T7996] bridge0: port 3(netdevsim0) entered blocking state [ 127.123864][ T7996] bridge0: port 3(netdevsim0) entered disabled state [ 127.139824][ T7996] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 127.176689][ T7996] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 127.496629][ T8016] syzkaller0: entered promiscuous mode [ 127.502189][ T8016] syzkaller0: entered allmulticast mode [ 127.712543][ T8039] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.719277][ T8039] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.828146][ T8045] openvswitch: netlink: IP tunnel dst address not specified [ 127.919967][ T8048] __nla_validate_parse: 2 callbacks suppressed [ 127.919986][ T8048] netlink: 144 bytes leftover after parsing attributes in process `syz.4.529'. [ 127.943737][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.529'. [ 128.135655][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.259179][ T8072] netlink: 'syz.0.535': attribute type 4 has an invalid length. [ 128.268225][ T8072] netlink: 224 bytes leftover after parsing attributes in process `syz.0.535'. [ 128.275785][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.293332][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.304187][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.346745][ T8075] ipvlan2: entered promiscuous mode [ 128.352010][ T8075] ipvlan2: entered allmulticast mode [ 128.357953][ T8075] geneve1: entered allmulticast mode [ 128.903633][ T8105] pim6reg: entered allmulticast mode [ 128.961246][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.546'. [ 128.975578][ T8107] lo speed is unknown, defaulting to 1000 [ 129.010912][ T8100] pim6reg: left allmulticast mode [ 129.141555][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.149273][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.244202][ T8110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.266544][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 129.283668][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 129.404721][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.545162][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.563860][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.608824][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.639094][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.675612][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.725215][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.733651][ T36] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.765698][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.802233][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 129.922907][ T8143] netlink: 'syz.1.553': attribute type 9 has an invalid length. [ 130.322411][ T8139] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 130.444208][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.539646][ T8133] syz.0.549 (8133) used greatest stack depth: 17688 bytes left [ 130.630027][ T8161] netlink: 'syz.2.556': attribute type 4 has an invalid length. [ 130.804881][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 130.835123][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 131.179596][ T8183] lo speed is unknown, defaulting to 1000 [ 131.226163][ T8181] netlink: 'syz.2.561': attribute type 3 has an invalid length. [ 131.639335][ T8190] x_tables: duplicate underflow at hook 1 [ 131.746558][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'. [ 131.747969][ T8187] syzkaller0: entered promiscuous mode [ 131.761411][ T8187] syzkaller0: entered allmulticast mode [ 131.833042][ T8193] bond2: entered promiscuous mode [ 131.845500][ T8193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.164127][ T8193] bond2 (unregistering): Released all slaves [ 132.399805][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.570'. [ 132.628666][ T8226] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 132.766643][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.811351][ T8234] netlink: 'syz.1.576': attribute type 20 has an invalid length. [ 132.820635][ T8233] ieee802154 phy0 wpan0: encryption failed: -90 [ 133.200591][ T8250] net_ratelimit: 8 callbacks suppressed [ 133.200602][ T8250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.235900][ T8248] lo speed is unknown, defaulting to 1000 [ 133.238795][ T8122] lo speed is unknown, defaulting to 1000 [ 133.478375][ T8266] syzkaller0: entered promiscuous mode [ 133.483878][ T8266] syzkaller0: entered allmulticast mode [ 133.558301][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.780484][ T8275] nbd: device at index 4 is going down [ 134.036501][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.054073][ T8286] netlink: 'syz.1.591': attribute type 4 has an invalid length. [ 134.062294][ T8286] __nla_validate_parse: 1 callbacks suppressed [ 134.062312][ T8286] netlink: 224 bytes leftover after parsing attributes in process `syz.1.591'. [ 134.356579][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.405159][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.593'. [ 134.437965][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 134.595223][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.671374][ T8313] lo speed is unknown, defaulting to 1000 [ 134.699365][ T8311] netlink: 'syz.1.599': attribute type 21 has an invalid length. [ 134.735722][ T8311] netlink: 128 bytes leftover after parsing attributes in process `syz.1.599'. [ 134.769301][ T8311] netlink: 'syz.1.599': attribute type 4 has an invalid length. [ 134.777909][ T8311] netlink: 'syz.1.599': attribute type 5 has an invalid length. [ 134.786107][ T8311] netlink: 3 bytes leftover after parsing attributes in process `syz.1.599'. [ 135.180711][ T8336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.605'. [ 135.228999][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 135.432807][ T8345] netlink: 'syz.0.607': attribute type 2 has an invalid length. [ 135.454757][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 135.495074][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 135.636039][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.711486][ T8363] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 135.774135][ T8363] netlink: 224 bytes leftover after parsing attributes in process `syz.0.613'. [ 135.863401][ T8366] lo speed is unknown, defaulting to 1000 [ 135.929251][ T8375] delete_channel: no stack [ 136.677492][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.720360][ T8406] veth0: entered promiscuous mode [ 136.799454][ T8409] veth0: left promiscuous mode [ 137.478505][ T8429] tipc: Cannot configure node identity twice [ 137.545425][ T1142] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.579707][ T8426] lo speed is unknown, defaulting to 1000 [ 137.652549][ T1142] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.694292][ T1142] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.746646][ T8447] netlink: 'syz.1.632': attribute type 10 has an invalid length. [ 137.768335][ T1142] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.800016][ T8447] netlink: 'syz.1.632': attribute type 10 has an invalid length. [ 137.882343][ T8447] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 139.091306][ T8516] tipc: Enabling of bearer rejected, failed to enable media [ 139.913928][ T8549] __nla_validate_parse: 7 callbacks suppressed [ 139.913946][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 140.077511][ T8560] netlink: 'syz.3.653': attribute type 30 has an invalid length. [ 140.094553][ T8558] x_tables: duplicate underflow at hook 3 [ 140.158981][ T8560] bond1: option arp_missed_max: invalid value (0) [ 140.167066][ T8560] bond1: option arp_missed_max: allowed values 1 - 255 [ 140.185790][ T8560] bond1 (unregistering): Released all slaves [ 140.229911][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 140.238878][ T8571] openvswitch: netlink: Missing key (keys=40, expected=80) [ 140.330202][ T8575] syz.1.655 (8575) used obsolete PPPIOCDETACH ioctl [ 140.519216][ T5928] hid-generic 0005:16C0:05DF.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 140.933729][ T8602] netlink: 'syz.4.663': attribute type 29 has an invalid length. [ 140.950323][ T8602] netlink: 'syz.4.663': attribute type 29 has an invalid length. [ 140.973887][ T8602] netlink: 500 bytes leftover after parsing attributes in process `syz.4.663'. [ 141.048716][ T8608] netlink: 104 bytes leftover after parsing attributes in process `syz.0.666'. [ 141.217039][ T8618] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 141.246702][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.565949][ T8635] netlink: 'syz.0.676': attribute type 39 has an invalid length. [ 141.621897][ T8635] hsr_slave_1 (unregistering): left promiscuous mode [ 142.048896][ T8652] lo speed is unknown, defaulting to 1000 [ 142.269298][ T8669] netlink: 'syz.2.687': attribute type 1 has an invalid length. [ 142.315634][ T8659] lo speed is unknown, defaulting to 1000 [ 142.352715][ T8676] FAULT_INJECTION: forcing a failure. [ 142.352715][ T8676] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.416977][ T8676] CPU: 1 UID: 0 PID: 8676 Comm: syz.0.688 Not tainted syzkaller #0 PREEMPT(full) [ 142.417004][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.417022][ T8676] Call Trace: [ 142.417030][ T8676] [ 142.417038][ T8676] dump_stack_lvl+0xe8/0x150 [ 142.417077][ T8676] should_fail_ex+0x414/0x560 [ 142.417111][ T8676] _copy_from_user+0x2d/0xb0 [ 142.417135][ T8676] __sys_bpf+0x1e3/0x860 [ 142.417164][ T8676] ? __pfx___sys_bpf+0x10/0x10 [ 142.417205][ T8676] ? ksys_write+0x22a/0x250 [ 142.417226][ T8676] ? __pfx_ksys_write+0x10/0x10 [ 142.417252][ T8676] __x64_sys_bpf+0x7c/0x90 [ 142.417276][ T8676] do_syscall_64+0xec/0xf80 [ 142.417296][ T8676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.417314][ T8676] ? trace_irq_disable+0x37/0x100 [ 142.417337][ T8676] ? clear_bhb_loop+0x60/0xb0 [ 142.417359][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.417377][ T8676] RIP: 0033:0x7fd1d3f8f749 [ 142.417394][ T8676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.417410][ T8676] RSP: 002b:00007fd1d4e10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.417434][ T8676] RAX: ffffffffffffffda RBX: 00007fd1d41e5fa0 RCX: 00007fd1d3f8f749 [ 142.417447][ T8676] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000002 [ 142.417458][ T8676] RBP: 00007fd1d4e10090 R08: 0000000000000000 R09: 0000000000000000 [ 142.417468][ T8676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.417479][ T8676] R13: 00007fd1d41e6038 R14: 00007fd1d41e5fa0 R15: 00007ffd35b7ee38 [ 142.417509][ T8676] [ 142.439336][ T8669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.560728][ T8685] Cannot find add_set index 1 as target [ 142.660204][ T8685] netlink: 'syz.3.691': attribute type 39 has an invalid length. [ 142.661632][ T8677] ip6gretap2: entered allmulticast mode [ 142.680142][ T8677] bond2: (slave ip6gretap2): making interface the new active one [ 142.693368][ T8677] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 142.976781][ T8704] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 143.078789][ T8704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.339775][ T8726] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 143.453833][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 143.536262][ T8726] batadv_slave_0: entered promiscuous mode [ 143.557390][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 143.623321][ T8736] netlink: 'syz.2.709': attribute type 58 has an invalid length. [ 143.632790][ T8736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.709'. [ 143.689410][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 143.798461][ T8740] FAULT_INJECTION: forcing a failure. [ 143.798461][ T8740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.812269][ T8740] CPU: 1 UID: 0 PID: 8740 Comm: syz.2.711 Not tainted syzkaller #0 PREEMPT(full) [ 143.812294][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.812305][ T8740] Call Trace: [ 143.812312][ T8740] [ 143.812320][ T8740] dump_stack_lvl+0xe8/0x150 [ 143.812348][ T8740] should_fail_ex+0x414/0x560 [ 143.812382][ T8740] _copy_from_user+0x2d/0xb0 [ 143.812407][ T8740] ___bpf_copy_key+0xaa/0x120 [ 143.812427][ T8740] map_update_elem+0x213/0x6a0 [ 143.812463][ T8740] __sys_bpf+0x619/0x860 [ 143.812491][ T8740] ? __pfx___sys_bpf+0x10/0x10 [ 143.812531][ T8740] ? ksys_write+0x22a/0x250 [ 143.812552][ T8740] ? __pfx_ksys_write+0x10/0x10 [ 143.812578][ T8740] __x64_sys_bpf+0x7c/0x90 [ 143.812602][ T8740] do_syscall_64+0xec/0xf80 [ 143.812621][ T8740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.812638][ T8740] ? trace_irq_disable+0x37/0x100 [ 143.812662][ T8740] ? clear_bhb_loop+0x60/0xb0 [ 143.812684][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.812701][ T8740] RIP: 0033:0x7f028dd8f749 [ 143.812727][ T8740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.812743][ T8740] RSP: 002b:00007f028eb69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.812774][ T8740] RAX: ffffffffffffffda RBX: 00007f028dfe5fa0 RCX: 00007f028dd8f749 [ 143.812787][ T8740] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000002 [ 143.812798][ T8740] RBP: 00007f028eb69090 R08: 0000000000000000 R09: 0000000000000000 [ 143.812808][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.812819][ T8740] R13: 00007f028dfe6038 R14: 00007f028dfe5fa0 R15: 00007fff2f97dd88 [ 143.812846][ T8740] [ 143.815694][ T8742] netlink: 388 bytes leftover after parsing attributes in process `syz.3.712'. [ 143.922623][ T8745] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 143.956519][ T8746] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.971186][ T8745] netlink: 60 bytes leftover after parsing attributes in process `syz.3.712'. [ 143.977644][ T8746] team0: Device ipvlan2 failed to register rx_handler [ 143.982409][ T8745] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 145.909797][ T8752] vxcan2: entered allmulticast mode [ 145.925122][ T8765] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 145.970199][ T8758] lo speed is unknown, defaulting to 1000 [ 146.652537][ T8794] batadv0: entered promiscuous mode [ 146.657889][ T8794] batadv0: entered allmulticast mode [ 146.804877][ T8805] tipc: Enabling of bearer rejected, failed to enable media [ 146.835107][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 146.945589][ T8807] lo speed is unknown, defaulting to 1000 [ 146.971210][ T8802] __nla_validate_parse: 1 callbacks suppressed [ 146.971244][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.725'. [ 147.021730][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 147.182573][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.1.731'. [ 147.233172][ T8829] syzkaller1: entered promiscuous mode [ 147.241657][ T8829] syzkaller1: entered allmulticast mode [ 147.275909][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.1.731'. [ 147.393558][ T8825] lo speed is unknown, defaulting to 1000 [ 147.783604][ T8848] netlink: 'syz.0.738': attribute type 1 has an invalid length. [ 147.795697][ T8848] netlink: 224 bytes leftover after parsing attributes in process `syz.0.738'. [ 147.907715][ T8854] netlink: 'syz.3.736': attribute type 4 has an invalid length. [ 148.140848][ T8863] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 148.324006][ T8877] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 148.423123][ T30] audit: type=1800 audit(1767276999.952:3): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.744" name="memory.events" dev="tmpfs" ino=886 res=0 errno=0 [ 148.443622][ T8877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.455313][ T30] audit: type=1804 audit(1767276999.952:4): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.744" name="/newroot/168/memory.events" dev="tmpfs" ino=886 res=1 errno=0 [ 148.508170][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 148.516141][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 148.612566][ T8887] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.626253][ T8887] bond2: (slave batadv1): making interface the new active one [ 148.667336][ T8887] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 148.831890][ T30] audit: type=1107 audit(1767277000.362:5): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 148.928134][ T8892] bond2 (unregistering): (slave batadv1): Releasing active interface [ 148.953182][ T8892] bond2 (unregistering): Released all slaves [ 148.981423][ T8904] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.750'. [ 148.993821][ T8904] ksmbd: Unknown IPC event: 1, ignore. [ 149.178473][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 149.199507][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 149.339331][ T8930] netlink: 'syz.3.754': attribute type 3 has an invalid length. [ 149.437719][ T8937] FAULT_INJECTION: forcing a failure. [ 149.437719][ T8937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.465065][ T8937] CPU: 1 UID: 0 PID: 8937 Comm: syz.4.757 Not tainted syzkaller #0 PREEMPT(full) [ 149.465092][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.465103][ T8937] Call Trace: [ 149.465111][ T8937] [ 149.465119][ T8937] dump_stack_lvl+0xe8/0x150 [ 149.465148][ T8937] should_fail_ex+0x414/0x560 [ 149.465182][ T8937] _copy_to_user+0x31/0xb0 [ 149.465208][ T8937] simple_read_from_buffer+0xe1/0x170 [ 149.465236][ T8937] proc_fail_nth_read+0x1b3/0x220 [ 149.465260][ T8937] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.465283][ T8937] ? rw_verify_area+0x2a6/0x4d0 [ 149.465301][ T8937] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.465322][ T8937] vfs_read+0x200/0xa30 [ 149.465339][ T8937] ? fdget_pos+0x247/0x320 [ 149.465366][ T8937] ? __pfx___mutex_lock+0x10/0x10 [ 149.465388][ T8937] ? __pfx_vfs_read+0x10/0x10 [ 149.465414][ T8937] ? __fget_files+0x2a/0x420 [ 149.465442][ T8937] ? __fget_files+0x3a0/0x420 [ 149.465464][ T8937] ? __fget_files+0x2a/0x420 [ 149.465496][ T8937] ksys_read+0x145/0x250 [ 149.465517][ T8937] ? __pfx_ksys_read+0x10/0x10 [ 149.465546][ T8937] do_syscall_64+0xec/0xf80 [ 149.465566][ T8937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.465583][ T8937] ? trace_irq_disable+0x37/0x100 [ 149.465607][ T8937] ? clear_bhb_loop+0x60/0xb0 [ 149.465630][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.465648][ T8937] RIP: 0033:0x7f643178e15c [ 149.465666][ T8937] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 149.465681][ T8937] RSP: 002b:00007f64325eb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.465702][ T8937] RAX: ffffffffffffffda RBX: 00007f64319e5fa0 RCX: 00007f643178e15c [ 149.465716][ T8937] RDX: 000000000000000f RSI: 00007f64325eb0a0 RDI: 0000000000000005 [ 149.465728][ T8937] RBP: 00007f64325eb090 R08: 0000000000000000 R09: 0000000000000000 [ 149.465740][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.465751][ T8937] R13: 00007f64319e6038 R14: 00007f64319e5fa0 R15: 00007ffe2198dd68 [ 149.465782][ T8937] [ 149.931811][ T8952] tipc: Started in network mode [ 149.937187][ T8952] tipc: Node identity 825d669c36cc, cluster identity 4711 [ 149.944900][ T8952] tipc: Enabled bearer , priority 0 [ 149.954198][ T8952] syzkaller0: entered promiscuous mode [ 149.959848][ T8952] syzkaller0: entered allmulticast mode [ 149.967241][ T8944] bridge_slave_1: left allmulticast mode [ 149.981507][ T8944] bridge_slave_1: left promiscuous mode [ 150.036346][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.106190][ T8944] bridge_slave_0: left allmulticast mode [ 150.111873][ T8944] bridge_slave_0: left promiscuous mode [ 150.122767][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.236522][ T8962] tipc: Resetting bearer [ 150.253620][ T8951] tipc: Resetting bearer [ 150.316720][ T8951] tipc: Disabling bearer [ 150.855885][ T9009] netlink: 'syz.2.776': attribute type 1 has an invalid length. [ 150.908034][ T9006] bridge_slave_1: left allmulticast mode [ 150.922610][ T9006] bridge_slave_1: left promiscuous mode [ 150.940413][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.962258][ T9006] bridge_slave_0: left allmulticast mode [ 150.969351][ T9006] bridge_slave_0: left promiscuous mode [ 151.000664][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.102616][ T9028] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 151.486107][ T9060] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 151.580173][ T9060] geneve3: entered promiscuous mode [ 151.589628][ T9060] geneve3: entered allmulticast mode [ 151.678357][ T9066] netlink: 'syz.4.790': attribute type 15 has an invalid length. [ 151.994759][ T9091] __nla_validate_parse: 14 callbacks suppressed [ 151.994777][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.798'. [ 152.292342][ T9108] syz_tun: entered allmulticast mode [ 152.380394][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 152.398787][ T9110] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 152.448778][ T9117] lo speed is unknown, defaulting to 1000 [ 152.476362][ T9110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'. [ 152.678264][ T9110] lo speed is unknown, defaulting to 1000 [ 152.804268][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 152.876374][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 152.935548][ T9151] netlink: 'syz.1.811': attribute type 11 has an invalid length. [ 152.969145][ T9158] netem: change failed [ 152.988724][ T9158] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 153.073384][ T9162] nftables ruleset with unbound chain [ 153.174860][ T9164] netlink: 44 bytes leftover after parsing attributes in process `syz.4.813'. [ 153.374821][ T9171] ip6t_rpfilter: unknown options [ 153.944291][ T9189] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 154.036084][ T9194] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.063876][ T9194] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 154.142499][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.823'. [ 154.168518][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 154.208924][ T9189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.289073][ T9194] bond3: (slave bridge0): Enslaving as an active interface with a down link [ 154.387912][ T9207] lo speed is unknown, defaulting to 1000 [ 154.753684][ T9216] lo speed is unknown, defaulting to 1000 [ 154.833488][ T9227] lo speed is unknown, defaulting to 1000 [ 154.966758][ T9237] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.836'. [ 155.072893][ T9237] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 155.105950][ T9237] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.836'. [ 155.146433][ T9237] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 155.315741][ T9248] syzkaller0: entered promiscuous mode [ 155.321305][ T9248] syzkaller0: entered allmulticast mode [ 155.559839][ T9262] vlan1: entered promiscuous mode [ 155.581499][ T9262] bond0: entered promiscuous mode [ 155.596073][ T9262] : entered promiscuous mode [ 155.611952][ T9262] bond_slave_1: entered promiscuous mode [ 156.260094][ T9274] lo speed is unknown, defaulting to 1000 [ 156.380367][ T9294] Bluetooth: MGMT ver 1.23 [ 156.387870][ T9296] netlink: 'syz.1.850': attribute type 19 has an invalid length. [ 156.423531][ T9296] netlink: 'syz.1.850': attribute type 19 has an invalid length. [ 156.599085][ T9301] lo speed is unknown, defaulting to 1000 [ 156.792021][ T9311] tipc: Enabled bearer , priority 0 [ 156.801991][ T9311] syzkaller0: entered promiscuous mode [ 156.807721][ T9311] syzkaller0: entered allmulticast mode [ 156.829547][ T9311] tipc: Resetting bearer [ 156.837877][ T9309] tipc: Resetting bearer [ 156.854481][ T9309] tipc: Disabling bearer [ 157.033378][ T9333] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 157.047410][ T9333] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 157.296646][ T9346] x_tables: duplicate underflow at hook 2 [ 157.319057][ T9346] x_tables: duplicate underflow at hook 2 [ 157.391006][ T9356] Cannot find add_set index 0 as target [ 157.512175][ T9363] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 157.579797][ T9363] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.600938][ T9369] FAULT_INJECTION: forcing a failure. [ 157.600938][ T9369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.617565][ T9369] CPU: 1 UID: 0 PID: 9369 Comm: syz.0.870 Not tainted syzkaller #0 PREEMPT(full) [ 157.617589][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.617605][ T9369] Call Trace: [ 157.617611][ T9369] [ 157.617618][ T9369] dump_stack_lvl+0xe8/0x150 [ 157.617641][ T9369] should_fail_ex+0x414/0x560 [ 157.617667][ T9369] _copy_to_user+0x31/0xb0 [ 157.617686][ T9369] simple_read_from_buffer+0xe1/0x170 [ 157.617708][ T9369] proc_fail_nth_read+0x1b3/0x220 [ 157.617726][ T9369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.617743][ T9369] ? rw_verify_area+0x2a6/0x4d0 [ 157.617756][ T9369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.617772][ T9369] vfs_read+0x200/0xa30 [ 157.617784][ T9369] ? fdget_pos+0x247/0x320 [ 157.617805][ T9369] ? __pfx___mutex_lock+0x10/0x10 [ 157.617821][ T9369] ? __pfx_vfs_read+0x10/0x10 [ 157.617835][ T9369] ? __fget_files+0x2a/0x420 [ 157.617855][ T9369] ? __fget_files+0x3a0/0x420 [ 157.617871][ T9369] ? __fget_files+0x2a/0x420 [ 157.617894][ T9369] ksys_read+0x145/0x250 [ 157.617906][ T9369] ? __fget_files+0x3a0/0x420 [ 157.617924][ T9369] ? __pfx_ksys_read+0x10/0x10 [ 157.617936][ T9369] ? __pfx_sock_ioctl+0x10/0x10 [ 157.617963][ T9369] do_syscall_64+0xec/0xf80 [ 157.617977][ T9369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.617990][ T9369] ? trace_irq_disable+0x37/0x100 [ 157.618008][ T9369] ? clear_bhb_loop+0x60/0xb0 [ 157.618025][ T9369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.618038][ T9369] RIP: 0033:0x7fd1d3f8e15c [ 157.618051][ T9369] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.618063][ T9369] RSP: 002b:00007fd1d4e10030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.618079][ T9369] RAX: ffffffffffffffda RBX: 00007fd1d41e5fa0 RCX: 00007fd1d3f8e15c [ 157.618090][ T9369] RDX: 000000000000000f RSI: 00007fd1d4e100a0 RDI: 0000000000000004 [ 157.618098][ T9369] RBP: 00007fd1d4e10090 R08: 0000000000000000 R09: 0000000000000000 [ 157.618107][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.618116][ T9369] R13: 00007fd1d41e6038 R14: 00007fd1d41e5fa0 R15: 00007ffd35b7ee38 [ 157.618140][ T9369] [ 157.649443][ T9363] bond4: (slave gretap2): making interface the new active one [ 157.917591][ T9363] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 158.673282][ T9449] __nla_validate_parse: 7 callbacks suppressed [ 158.673300][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'. [ 158.864679][ T9462] netlink: 44 bytes leftover after parsing attributes in process `syz.4.895'. [ 158.895814][ T9460] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 158.904638][ T9460] netlink: 224 bytes leftover after parsing attributes in process `syz.2.892'. [ 158.997129][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 159.007632][ T9465] netlink: 64 bytes leftover after parsing attributes in process `syz.3.897'. [ 159.027900][ T9469] delete_channel: no stack [ 159.048402][ T9465] netlink: 44 bytes leftover after parsing attributes in process `syz.3.897'. [ 159.319505][ T9487] lo speed is unknown, defaulting to 1000 [ 160.076199][ T9531] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 160.135053][ T9533] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 160.142817][ T9533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.912'. [ 160.342409][ T9531] batadv0: entered allmulticast mode [ 160.350860][ T9531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.362122][ T9531] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 160.396738][ T9533] batadv0: entered promiscuous mode [ 160.456481][ T9533] bond0: (slave batadv0): Releasing backup interface [ 160.497711][ T9533] bridge0: port 4(batadv0) entered blocking state [ 160.533457][ T9533] bridge0: port 4(batadv0) entered disabled state [ 160.703015][ T9551] xt_TCPMSS: Only works on TCP SYN packets [ 160.768098][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.916'. [ 160.777473][ T9546] openvswitch: netlink: Flow actions attr not present in new flow. [ 160.786282][ T9546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.916'. [ 160.833820][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 160.940865][ T3526] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 160.950653][ T3526] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 161.118754][ T9574] bond0: entered promiscuous mode [ 161.123920][ T9574] bond_slave_0: entered promiscuous mode [ 161.144008][ T9574] bond_slave_1: entered promiscuous mode [ 161.159688][ T9574] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 161.181476][ T9574] bond0: left promiscuous mode [ 161.189347][ T9574] bond_slave_0: left promiscuous mode [ 161.195073][ T9574] bond_slave_1: left promiscuous mode [ 161.213776][ T9580] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 161.262750][ T9580] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 161.298564][ T8122] lo speed is unknown, defaulting to 1000 [ 161.349540][ T6066] lo speed is unknown, defaulting to 1000 [ 161.429430][ T9595] syzkaller0: entered promiscuous mode [ 161.456616][ T9595] syzkaller0: entered allmulticast mode [ 161.947854][ T9618] lo speed is unknown, defaulting to 1000 [ 162.010229][ T9632] lo speed is unknown, defaulting to 1000 [ 162.438682][ T9642] lo speed is unknown, defaulting to 1000 [ 162.474364][ T9660] netlink: 'syz.0.949': attribute type 10 has an invalid length. [ 162.716949][ T9662] lo speed is unknown, defaulting to 1000 [ 162.902881][ T9678] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 162.954352][ T9673] SET target dimension over the limit! [ 163.063212][ T9680] syzkaller0: entered promiscuous mode [ 163.075536][ T9680] syzkaller0: entered allmulticast mode [ 163.114203][ T9678] vlan2: entered promiscuous mode [ 163.119645][ T9678] bridge0: entered promiscuous mode [ 163.171907][ T9687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.417492][ T9702] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 163.702754][ T9728] __nla_validate_parse: 8 callbacks suppressed [ 163.702772][ T9728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'. [ 163.757285][ T9722] lo speed is unknown, defaulting to 1000 [ 163.969854][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 164.563046][ T9763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.978'. [ 164.574784][ T9763] xt_recent: Unsupported userspace flags (000000a3) [ 164.644647][ T9761] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 164.691375][ T9766] lo speed is unknown, defaulting to 1000 [ 164.717717][ T9772] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 164.950170][ T9780] lo speed is unknown, defaulting to 1000 [ 165.187809][ T9780] netlink: zone id is out of range [ 165.193471][ T9780] netlink: zone id is out of range [ 165.200221][ T9780] netlink: zone id is out of range [ 165.210952][ T9780] netlink: set zone limit has 8 unknown bytes [ 165.257135][ T9788] syzkaller0: entered promiscuous mode [ 165.262972][ T9788] syzkaller0: entered allmulticast mode [ 165.852580][ T9793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.986'. [ 165.995786][ T9798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.989'. [ 166.007132][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 166.177599][ T9790] lo speed is unknown, defaulting to 1000 [ 166.237030][ T9819] openvswitch: netlink: Message has 4 unknown bytes. [ 166.244184][ T9811] openvswitch: netlink: Message has 4 unknown bytes. [ 166.299432][ T9811] bond2 (unregistering): Released all slaves [ 166.361540][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 166.373595][ T9809] bond2 (unregistering): Released all slaves [ 166.387406][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 166.433467][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 166.843827][ T9840] lo speed is unknown, defaulting to 1000 [ 166.970237][ T9850] netlink: 'syz.1.1001': attribute type 15 has an invalid length. [ 167.009157][ T9850] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1001'. [ 167.232473][ T9841] syzkaller0: entered promiscuous mode [ 167.241788][ T9841] syzkaller0: entered allmulticast mode [ 167.289346][ T9865] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 167.305894][ T9864] lo speed is unknown, defaulting to 1000 [ 167.307295][ T9865] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 168.842623][ T9869] syzkaller1: entered promiscuous mode [ 168.848325][ T9869] syzkaller1: entered allmulticast mode [ 169.109133][ T9903] dummy0: entered allmulticast mode [ 169.337042][ T9914] netlink: 'syz.1.1015': attribute type 4 has an invalid length. [ 169.365926][ T9924] __nla_validate_parse: 2 callbacks suppressed [ 169.365943][ T9924] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1015'. [ 169.398585][ T9910] lo speed is unknown, defaulting to 1000 [ 169.517744][ T9931] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1018'. [ 169.544387][ T9931] netlink: 'syz.2.1018': attribute type 9 has an invalid length. [ 169.565063][ T9931] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1018'. [ 169.601525][ T9931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1018'. [ 169.669160][ T9943] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1021'. [ 169.756576][ T9945] netlink: 'syz.4.1021': attribute type 11 has an invalid length. [ 169.764435][ T9945] netlink: 'syz.4.1021': attribute type 11 has an invalid length. [ 169.797264][ T9945] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1021'. [ 169.824399][ T9931] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 169.881669][ T9958] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1018'. [ 170.051857][ T9931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.083022][ T9931] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1018'. [ 170.094179][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.094179][ T9973] Use struct sctp_assoc_value instead [ 170.157143][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.157143][ T9973] Use struct sctp_assoc_value instead [ 170.183917][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.183917][ T9973] Use struct sctp_assoc_value instead [ 170.241918][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.241918][ T9973] Use struct sctp_assoc_value instead [ 170.299317][ T9980] syzkaller0: entered promiscuous mode [ 170.304825][ T9980] syzkaller0: entered allmulticast mode [ 170.315139][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.315139][ T9973] Use struct sctp_assoc_value instead [ 170.337221][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.337221][ T9973] Use struct sctp_assoc_value instead [ 170.361702][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.361702][ T9973] Use struct sctp_assoc_value instead [ 170.441569][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.441569][ T9973] Use struct sctp_assoc_value instead [ 170.462975][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.462975][ T9973] Use struct sctp_assoc_value instead [ 170.481223][ T9973] sctp: [Deprecated]: syz.3.1025 (pid 9973) Use of int in max_burst socket option deprecated. [ 170.481223][ T9973] Use struct sctp_assoc_value instead [ 172.318628][ T9987] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1032'. [ 172.552588][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 172.565560][T10018] lo speed is unknown, defaulting to 1000 [ 172.654889][T10019] lo speed is unknown, defaulting to 1000 [ 172.692380][T10022] lo speed is unknown, defaulting to 1000 [ 173.025296][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.046083][T10044] bond0: (slave rose0): Enslaving as an active interface with an up link [ 173.239208][T10054] geneve3: entered promiscuous mode [ 173.349434][T10059] lo speed is unknown, defaulting to 1000 [ 173.711714][T10075] netlink: 'syz.3.1052': attribute type 6 has an invalid length. [ 174.376400][T10119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.383689][T10119] IPv6: NLM_F_CREATE should be set when creating new route [ 174.412371][T10119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.419750][T10119] IPv6: NLM_F_CREATE should be set when creating new route [ 174.536449][T10130] IPVS: stopping backup sync thread 7842 ... [ 174.674770][T10129] lo speed is unknown, defaulting to 1000 [ 174.909541][T10150] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 175.213769][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.237608][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.255468][T10173] __nla_validate_parse: 7 callbacks suppressed [ 175.255490][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 175.260945][T10170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.275208][T10173] netlink: 'syz.0.1081': attribute type 9 has an invalid length. [ 175.284792][T10174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.310263][ T69] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.319406][ T69] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.335679][ T69] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.358562][ T69] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.146200][ T5834] syz_tun (unregistering): left allmulticast mode [ 176.357573][T10167] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 176.369482][T10167] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 176.377879][T10167] CPU: 1 UID: 0 PID: 10167 Comm: syz.4.1079 Not tainted syzkaller #0 PREEMPT(full) [ 176.388179][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.398214][T10167] RIP: 0010:klist_remove+0x14a/0x340 [ 176.403487][T10167] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 01 d7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 01 d7 f6 49 8b 44 24 58 48 89 44 24 08 [ 176.423082][T10167] RSP: 0018:ffffc9000eae7620 EFLAGS: 00010202 [ 176.429131][T10167] RAX: 000000000000000b RBX: ffff88802e885b80 RCX: 0000000000000000 [ 176.437079][T10167] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 176.445026][T10167] RBP: ffffc9000eae7720 R08: ffffffff8f68d143 R09: 1ffffffff1ed1a28 [ 176.452976][T10167] R10: dffffc0000000000 R11: fffffbfff1ed1a29 R12: 0000000000000000 [ 176.461013][T10167] R13: 1ffff1100d00d10c R14: ffff888068068860 R15: dffffc0000000000 [ 176.468966][T10167] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 176.477898][T10167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.484460][T10167] CR2: 00007f6432587f98 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 176.492417][T10167] Call Trace: [ 176.495682][T10167] [ 176.498598][T10167] ? __pfx_klist_remove+0x10/0x10 [ 176.503604][T10167] ? kobject_move+0x5a6/0x6e0 [ 176.508266][T10167] ? __pfx_kobject_move+0x10/0x10 [ 176.513270][T10167] ? do_raw_spin_unlock+0x122/0x240 [ 176.518456][T10167] ? get_device_parent+0x366/0x3a0 [ 176.523546][T10167] device_move+0x193/0x730 [ 176.527941][T10167] hci_conn_del_sysfs+0xb8/0x1a0 [ 176.532852][T10167] hci_conn_del+0xc36/0x1240 [ 176.537424][T10167] hci_conn_hash_flush+0x191/0x260 [ 176.542516][T10167] hci_dev_close_sync+0x821/0x1100 [ 176.547608][T10167] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 176.553147][T10167] ? up_write+0x1ac/0x410 [ 176.557458][T10167] ? rcu_is_watching+0x15/0xb0 [ 176.562202][T10167] hci_unregister_dev+0x21a/0x5b0 [ 176.567204][T10167] vhci_release+0x152/0x1a0 [ 176.571689][T10167] ? __pfx_vhci_release+0x10/0x10 [ 176.576690][T10167] __fput+0x44c/0xa70 [ 176.580655][T10167] task_work_run+0x1d4/0x260 [ 176.585225][T10167] ? __pfx_task_work_run+0x10/0x10 [ 176.590316][T10167] ? kmem_cache_free+0x197/0x620 [ 176.595227][T10167] ? do_exit+0x68f/0x22f0 [ 176.599535][T10167] do_exit+0x694/0x22f0 [ 176.603666][T10167] ? kfree+0x4d/0x660 [ 176.607632][T10167] ? cgroup1_freezing+0x20/0x350 [ 176.612550][T10167] ? __pfx_do_exit+0x10/0x10 [ 176.617129][T10167] do_group_exit+0x21c/0x2d0 [ 176.621706][T10167] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.626887][T10167] get_signal+0x1285/0x1340 [ 176.631372][T10167] arch_do_signal_or_restart+0x9a/0x7a0 [ 176.636913][T10167] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 176.643071][T10167] exit_to_user_mode_loop+0x87/0x4e0 [ 176.648343][T10167] ? rcu_is_watching+0x15/0xb0 [ 176.653093][T10167] do_syscall_64+0x2b7/0xf80 [ 176.657665][T10167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.663709][T10167] ? trace_irq_disable+0x37/0x100 [ 176.668718][T10167] ? clear_bhb_loop+0x60/0xb0 [ 176.673379][T10167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.679259][T10167] RIP: 0033:0x7f643178f749 [ 176.683651][T10167] Code: Unable to access opcode bytes at 0x7f643178f71f. [ 176.690643][T10167] RSP: 002b:00007f64325eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.699034][T10167] RAX: fffffffffffffffc RBX: 00007f64319e5fa0 RCX: 00007f643178f749 [ 176.706994][T10167] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 176.714966][T10167] RBP: 00007f6431813f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.723018][T10167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.730970][T10167] R13: 00007f64319e6038 R14: 00007f64319e5fa0 R15: 00007ffe2198dd68 [ 176.738927][T10167] [ 176.741927][T10167] Modules linked in: [ 176.746662][T10167] ---[ end trace 0000000000000000 ]--- [ 176.752438][T10167] RIP: 0010:klist_remove+0x14a/0x340 [ 176.758097][T10167] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 01 d7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 01 d7 f6 49 8b 44 24 58 48 89 44 24 08 [ 176.777980][T10167] RSP: 0018:ffffc9000eae7620 EFLAGS: 00010202 [ 176.784048][T10167] RAX: 000000000000000b RBX: ffff88802e885b80 RCX: 0000000000000000 [ 176.792633][T10167] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 176.800633][T10167] RBP: ffffc9000eae7720 R08: ffffffff8f68d143 R09: 1ffffffff1ed1a28 [ 176.810040][T10167] R10: dffffc0000000000 R11: fffffbfff1ed1a29 R12: 0000000000000000 [ 176.818332][T10167] R13: 1ffff1100d00d10c R14: ffff888068068860 R15: dffffc0000000000 [ 176.826444][T10167] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 176.835531][T10167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.842122][T10167] CR2: 000000110c373eb5 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 176.850130][T10167] Kernel panic - not syncing: Fatal exception [ 176.856568][T10167] Kernel Offset: disabled [ 176.860876][T10167] Rebooting in 86400 seconds..