last executing test programs: 1m41.086996836s ago: executing program 0 (id=844): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 1m40.890737618s ago: executing program 0 (id=850): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x6, 0x33, &(0x7f00000001c0)=""/51, 0x41000, 0x36, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x5, 0x9da}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)=[{0x4, 0x2, 0x0, 0x1}, {0x1, 0x1, 0xb, 0x7}, {0x3, 0x4, 0x4, 0x2}, {0x3, 0x2, 0x7, 0x1}, {0x3, 0x1, 0x6, 0x8}], 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000e56520207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', r1, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000640)='fib6_table_lookup\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1m40.618219111s ago: executing program 0 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m40.230879461s ago: executing program 0 (id=862): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="09c9b8c199ca"}) close(r3) 1m35.279261397s ago: executing program 0 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22044001, &(0x7f0000b63fe4)={0xa, 0x2, 0x4, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x2) 1m35.087186219s ago: executing program 4 (id=878): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000940)) 1m35.027079569s ago: executing program 3 (id=880): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000480)=0x3f11, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 1m34.967699231s ago: executing program 4 (id=882): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00000000000000"], 0x40}, 0x20000000) 1m34.875002615s ago: executing program 3 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe0f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01}, 0x810) 1m34.849754579s ago: executing program 4 (id=885): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="a5", 0x1, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r1, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000", 0x2f}], 0x1) close(0x3) 1m34.646781989s ago: executing program 3 (id=889): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000100)={@remote, @dev, @val={@void, {0x8906}}, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010101, @rand_addr, {[@lsrr={0x83, 0xf, 0xfb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}}, 0x0) 1m34.51677745s ago: executing program 3 (id=892): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m34.44550997s ago: executing program 3 (id=893): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@updsa={0x180, 0x1a, 0xb11, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x100000000, 0x0, 0x0, 0x0, 0x970}, {}, {0x0, 0x0, 0x4}, 0x0, 0x3503, 0xa}, [@algo_crypt={0x48, 0x2, {{'xchacha20-neon\x00'}}}, @algo_auth={0x48, 0x1, {{'sha256-asm\x00'}}}]}, 0x180}}, 0x0) 1m34.327384551s ago: executing program 3 (id=896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb2, 0x32810, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) 1m34.088443265s ago: executing program 1 (id=899): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00010200000000000000fd680000", @ANYRES32=0x0, @ANYBLOB="8cca"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 1m33.778943048s ago: executing program 4 (id=900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xf0, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1m31.233490152s ago: executing program 1 (id=902): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000001000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 1m31.233099947s ago: executing program 4 (id=903): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6001010000100100fe8000000000000000000000008000bbfe8000000000000000000000000000aa4e"], 0x0) 1m31.021399236s ago: executing program 0 (id=904): unshare(0x22020600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 1m30.909463383s ago: executing program 4 (id=906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x80, 0x900, 0x0, 0x1c, {[@window={0xe}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m27.311014859s ago: executing program 1 (id=918): shutdown(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r3, 0x14200}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000280)=0xfffffff9, 0x4) 1m15.315521188s ago: executing program 32 (id=904): unshare(0x22020600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 1m15.029074016s ago: executing program 33 (id=896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb2, 0x32810, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) 1m14.963763674s ago: executing program 34 (id=906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x80, 0x900, 0x0, 0x1c, {[@window={0xe}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m14.938198592s ago: executing program 1 (id=927): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff16, &(0x7f0000000380)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x1, 0x2}, {0x9, 0x9}}}, 0x24}}, 0x4008815) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x10}, {}, {0x9, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x48}}, 0x801) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m14.937806308s ago: executing program 2 (id=928): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)="ede82c4adf88513be9ee4732c719e2f5f50bff569309a8242e", 0x19}, 0x1, 0x0, 0x0, 0x54}, 0x4000) 1m14.454593764s ago: executing program 2 (id=929): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000", 0x4}], 0x1}, 0x0) 1m14.408015405s ago: executing program 1 (id=930): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0x20000000) 1m14.14064603s ago: executing program 1 (id=931): socket(0x2c, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000000000, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x0, 0x0) close(0x4) 1m5.709921779s ago: executing program 2 (id=932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 54.338414294s ago: executing program 35 (id=931): socket(0x2c, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2000000000000000, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x0, 0x0) close(0x4) 54.25545551s ago: executing program 2 (id=934): shutdown(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r3, 0x14200}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000280)=0xfffffff9, 0x4) 53.679329436s ago: executing program 2 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000002030104"], 0x1c}}, 0x0) 53.550524306s ago: executing program 2 (id=936): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @remote}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 36 (id=936): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @remote}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 74.484520][ T5818] cgroup: Unknown subsys name 'net' [ 74.621822][ T5818] cgroup: Unknown subsys name 'cpuset' [ 74.631032][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.159316][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.604871][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.618216][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.624649][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.634043][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.634804][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.650066][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.651708][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.665815][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.668554][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.688624][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.688802][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.699359][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.710175][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.719325][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.727207][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.727808][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.734689][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.741574][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.749867][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.760576][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.770109][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.772464][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.779922][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.786446][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.791498][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.806722][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.814916][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.837451][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.851494][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.859447][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.352178][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 79.382205][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 79.431363][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 79.458270][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 79.498525][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 79.638154][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.645945][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.654091][ T5830] bridge_slave_0: entered allmulticast mode [ 79.662306][ T5830] bridge_slave_0: entered promiscuous mode [ 79.711103][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.718378][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.725978][ T5828] bridge_slave_0: entered allmulticast mode [ 79.733870][ T5828] bridge_slave_0: entered promiscuous mode [ 79.742703][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.750637][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.758469][ T5830] bridge_slave_1: entered allmulticast mode [ 79.765361][ T5830] bridge_slave_1: entered promiscuous mode [ 79.807427][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.814753][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.822620][ T5828] bridge_slave_1: entered allmulticast mode [ 79.830123][ T5828] bridge_slave_1: entered promiscuous mode [ 79.884212][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.892068][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.900132][ T5840] bridge_slave_0: entered allmulticast mode [ 79.907001][ T5840] bridge_slave_0: entered promiscuous mode [ 79.914323][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.921780][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.929396][ T5829] bridge_slave_0: entered allmulticast mode [ 79.936596][ T5829] bridge_slave_0: entered promiscuous mode [ 79.958698][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.970657][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.981288][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.989027][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.996275][ T5840] bridge_slave_1: entered allmulticast mode [ 80.004111][ T5840] bridge_slave_1: entered promiscuous mode [ 80.011277][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.018787][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.025984][ T5829] bridge_slave_1: entered allmulticast mode [ 80.033117][ T5829] bridge_slave_1: entered promiscuous mode [ 80.050541][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.071062][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.114449][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.121969][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.130121][ T5835] bridge_slave_0: entered allmulticast mode [ 80.137078][ T5835] bridge_slave_0: entered promiscuous mode [ 80.165233][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.177060][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.186637][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.194565][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.202096][ T5835] bridge_slave_1: entered allmulticast mode [ 80.209477][ T5835] bridge_slave_1: entered promiscuous mode [ 80.221365][ T5828] team0: Port device team_slave_0 added [ 80.229934][ T5828] team0: Port device team_slave_1 added [ 80.246135][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.266339][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.322273][ T5830] team0: Port device team_slave_0 added [ 80.348937][ T5829] team0: Port device team_slave_0 added [ 80.366516][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.374264][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.401513][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.414872][ T5830] team0: Port device team_slave_1 added [ 80.434215][ T5840] team0: Port device team_slave_0 added [ 80.442975][ T5840] team0: Port device team_slave_1 added [ 80.450274][ T5829] team0: Port device team_slave_1 added [ 80.466485][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.476509][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.483679][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.510600][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.533219][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.541006][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.567543][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.597257][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.615324][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.622744][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.649614][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.670857][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.677929][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.704368][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.756974][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.768285][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.795399][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.807262][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.814305][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.840341][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.853280][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.861216][ T5839] Bluetooth: hci0: command tx timeout [ 80.861262][ T5848] Bluetooth: hci2: command tx timeout [ 80.867135][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.873472][ T5848] Bluetooth: hci4: command tx timeout [ 80.898449][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.904002][ T5843] Bluetooth: hci1: command tx timeout [ 80.918548][ T5835] team0: Port device team_slave_0 added [ 80.937838][ T5848] Bluetooth: hci3: command tx timeout [ 80.963227][ T5835] team0: Port device team_slave_1 added [ 80.984413][ T5828] hsr_slave_0: entered promiscuous mode [ 80.991462][ T5828] hsr_slave_1: entered promiscuous mode [ 81.030463][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.037602][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.063902][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.082933][ T5830] hsr_slave_0: entered promiscuous mode [ 81.089662][ T5830] hsr_slave_1: entered promiscuous mode [ 81.095740][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.103997][ T5830] Cannot create hsr debugfs directory [ 81.123171][ T5840] hsr_slave_0: entered promiscuous mode [ 81.129768][ T5840] hsr_slave_1: entered promiscuous mode [ 81.135894][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.144034][ T5840] Cannot create hsr debugfs directory [ 81.162234][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.169330][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.196092][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.252515][ T5829] hsr_slave_0: entered promiscuous mode [ 81.259378][ T5829] hsr_slave_1: entered promiscuous mode [ 81.265387][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.273062][ T5829] Cannot create hsr debugfs directory [ 81.444098][ T5835] hsr_slave_0: entered promiscuous mode [ 81.451568][ T5835] hsr_slave_1: entered promiscuous mode [ 81.457966][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.465568][ T5835] Cannot create hsr debugfs directory [ 81.713922][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.742340][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.763368][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.785429][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.816410][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.828628][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.842932][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.852884][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.916928][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.931961][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.949246][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.976664][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.050123][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.066633][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.076806][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.091140][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.185763][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.220050][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.232492][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.243756][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.314644][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.331800][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.373848][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.391214][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.406228][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.419183][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.426587][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.457156][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.464345][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.490914][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.498217][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.510028][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.517161][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.572750][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.609945][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.623391][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.669957][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.686571][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.693803][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.708020][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.715182][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.749039][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.799327][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.806481][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.842901][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.880104][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.887229][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.937901][ T5848] Bluetooth: hci2: command tx timeout [ 82.943597][ T5848] Bluetooth: hci0: command tx timeout [ 82.948685][ T5839] Bluetooth: hci1: command tx timeout [ 82.954457][ T5843] Bluetooth: hci4: command tx timeout [ 82.976007][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.018479][ T5843] Bluetooth: hci3: command tx timeout [ 83.031826][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.039098][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.049372][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.056534][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.066591][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.271825][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.303520][ T5828] veth0_vlan: entered promiscuous mode [ 83.347063][ T5828] veth1_vlan: entered promiscuous mode [ 83.446728][ T5828] veth0_macvtap: entered promiscuous mode [ 83.462216][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.481015][ T5840] veth0_vlan: entered promiscuous mode [ 83.491161][ T5828] veth1_macvtap: entered promiscuous mode [ 83.523190][ T5840] veth1_vlan: entered promiscuous mode [ 83.564861][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.620089][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.635036][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.644744][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.656306][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.667024][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.725848][ T5830] veth0_vlan: entered promiscuous mode [ 83.745484][ T5840] veth0_macvtap: entered promiscuous mode [ 83.770758][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.782031][ T5840] veth1_macvtap: entered promiscuous mode [ 83.801659][ T5830] veth1_vlan: entered promiscuous mode [ 83.825031][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.838230][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.849765][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.871793][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.906728][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.928346][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.939909][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.974333][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.998008][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.006801][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.017353][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.061610][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.076730][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.122396][ T5830] veth0_macvtap: entered promiscuous mode [ 84.133491][ T5830] veth1_macvtap: entered promiscuous mode [ 84.172455][ T5835] veth0_vlan: entered promiscuous mode [ 84.191108][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.206599][ T5835] veth1_vlan: entered promiscuous mode [ 84.210006][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.269094][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.280481][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.291208][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.303855][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.323491][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.352371][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.373194][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.386653][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.398174][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.408889][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.422995][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.521456][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.536662][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.548763][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.557751][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.609156][ T959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.631358][ T959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.649845][ T5835] veth0_macvtap: entered promiscuous mode [ 84.665207][ T5829] veth0_vlan: entered promiscuous mode [ 84.713458][ T5835] veth1_macvtap: entered promiscuous mode [ 84.752843][ T5829] veth1_vlan: entered promiscuous mode [ 84.775923][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.801413][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.882950][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.900324][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.914457][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.925356][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.935392][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.947926][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.961137][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.983704][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.004564][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.018486][ T54] Bluetooth: hci1: command tx timeout [ 85.026148][ T5829] veth0_macvtap: entered promiscuous mode [ 85.036526][ T5839] Bluetooth: hci0: command tx timeout [ 85.036559][ T5848] Bluetooth: hci2: command tx timeout [ 85.048886][ T5843] Bluetooth: hci4: command tx timeout [ 85.059606][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.082038][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.092116][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.103354][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.104952][ T5848] Bluetooth: hci3: command tx timeout [ 85.113829][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.131115][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.142697][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.152887][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.162130][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.171177][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.180563][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.296389][ T5829] veth1_macvtap: entered promiscuous mode [ 85.323877][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.339524][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.347839][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.362387][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.374178][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.390319][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.403579][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.414102][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.425278][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.435342][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.446635][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.458641][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.481000][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.492353][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.502673][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.513223][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.523262][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.533897][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.543972][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.554919][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.566454][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.635624][ T5927] syzkaller0: entered promiscuous mode [ 85.652131][ T5927] syzkaller0: entered allmulticast mode [ 85.691317][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.703824][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.724429][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.750562][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.134094][ T58] cfg80211: failed to load regulatory.db [ 86.397555][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.112386][ T5848] Bluetooth: hci2: command tx timeout [ 87.121549][ T5848] Bluetooth: hci4: command tx timeout [ 87.127029][ T5848] Bluetooth: hci1: command tx timeout [ 87.127701][ T5843] Bluetooth: hci0: command tx timeout [ 87.179718][ T5843] Bluetooth: hci3: command tx timeout [ 88.358157][ T5945] veth0_vlan: entered allmulticast mode [ 88.403237][ T5946] ªªªªªª: renamed from vlan0 [ 88.460282][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.505649][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.618951][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 88.650665][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.691509][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.775408][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.808659][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.050839][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.072682][ T5965] veth0_vlan: entered allmulticast mode [ 89.099106][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.167189][ T5966] smc: net device bond0 applied user defined pnetid SYZ0 [ 89.197833][ T5968] smc: net device bond0 erased user defined pnetid SYZ0 [ 89.241547][ T5970] bond1: entered promiscuous mode [ 89.246848][ T5970] bond1: entered allmulticast mode [ 89.253687][ T5970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.631744][ T5970] bond1 (unregistering): Released all slaves [ 89.701603][ T5965] ÿÿÿÿÿÿ: renamed from vlan1 [ 90.120541][ T5982] netlink: 332 bytes leftover after parsing attributes in process `syz.3.29'. [ 90.411021][ T5990] vlan2: entered allmulticast mode [ 90.496827][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 91.006910][ T6004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.206024][ T6004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.244402][ T6013] vlan0: entered allmulticast mode [ 91.310525][ T6014] bridge0: port 3(vlan2) entered blocking state [ 91.317134][ T6014] bridge0: port 3(vlan2) entered disabled state [ 91.326551][ T6014] vlan2: entered allmulticast mode [ 91.343714][ T6014] vlan2: left allmulticast mode [ 91.439875][ T6004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.642173][ T6004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.846635][ T6032] xt_CT: No such helper "pptp" [ 91.849320][ T6004] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.936539][ T6004] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.984466][ T6004] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.044242][ T6042] netlink: 332 bytes leftover after parsing attributes in process `syz.4.56'. [ 92.056413][ T6004] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.211541][ T6048] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 92.475592][ T6059] Zero length message leads to an empty skb [ 92.575319][ T6064] vlan2: entered allmulticast mode [ 92.668107][ T6067] vlan2: entered allmulticast mode [ 92.744985][ T6072] atomic_op ffff888020e81998 conn xmit_atomic 0000000000000000 [ 92.928421][ T6077] netlink: 332 bytes leftover after parsing attributes in process `syz.1.72'. [ 93.180031][ T6084] bridge0: port 3(gretap0) entered blocking state [ 93.186997][ T6084] bridge0: port 3(gretap0) entered disabled state [ 93.193760][ T6084] gretap0: entered allmulticast mode [ 93.205147][ T6084] gretap0: entered promiscuous mode [ 93.212238][ T6084] bridge0: port 3(gretap0) entered blocking state [ 93.219810][ T6084] bridge0: port 3(gretap0) entered forwarding state [ 93.234115][ T6089] syzkaller0: entered allmulticast mode [ 93.299767][ T6089] syzkaller0 (unregistering): left allmulticast mode [ 93.339373][ T6098] Illegal XDP return value 4294967274 on prog (id 60) dev N/A, expect packet loss! [ 93.403241][ T6094] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.436350][ T6101] vlan1: entered allmulticast mode [ 93.500870][ T6094] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.662055][ T6094] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.742889][ T6111] netlink: 332 bytes leftover after parsing attributes in process `syz.2.87'. [ 93.769246][ T6094] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.942266][ T6121] vlan1: entered allmulticast mode [ 98.341747][ T6135] vlan2: entered allmulticast mode [ 98.505004][ T6143] netlink: 332 bytes leftover after parsing attributes in process `syz.3.102'. [ 98.590676][ T6094] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.641182][ T6094] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.695358][ T6094] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.716467][ T6094] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.113773][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 99.368760][ T6180] netlink: 332 bytes leftover after parsing attributes in process `syz.0.116'. [ 99.523082][ T6188] syz.3.119[6188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.523198][ T6188] syz.3.119[6188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.573597][ T6188] syz.3.119[6188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.031639][ T6208] netlink: 'syz.4.130': attribute type 3 has an invalid length. [ 100.813530][ T6247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.149'. [ 101.846338][ T6282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 103.110257][ T6331] vlan0: entered allmulticast mode [ 103.144655][ T6334] netlink: 'syz.4.191': attribute type 39 has an invalid length. [ 103.238129][ T6334] veth0_macvtap: left promiscuous mode [ 103.750965][ T6357] ip6gre1: entered allmulticast mode [ 104.218281][ T6368] syz.0.206[6368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.218389][ T6368] syz.0.206[6368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.256239][ T6368] syz.0.206[6368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.709406][ T6395] xt_hashlimit: size too large, truncated to 1048576 [ 106.044846][ T29] audit: type=1107 audit(1737134712.294:2): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 108.114300][ T6440] netlink: 80 bytes leftover after parsing attributes in process `syz.3.235'. [ 108.860707][ T6490] vlan2: entered allmulticast mode [ 111.732072][ T6569] netlink: 356 bytes leftover after parsing attributes in process `syz.4.291'. [ 112.367795][ T6578] vlan2: entered allmulticast mode [ 112.779569][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 112.805025][ T6594] netlink: 356 bytes leftover after parsing attributes in process `syz.3.302'. [ 113.795102][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 113.824732][ T6627] netlink: 356 bytes leftover after parsing attributes in process `syz.4.317'. [ 114.288435][ T6646] netlink: 96 bytes leftover after parsing attributes in process `syz.1.326'. [ 115.558878][ T6677] syzkaller0: entered promiscuous mode [ 115.582019][ T6677] syzkaller0: entered allmulticast mode [ 115.720645][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 115.830233][ T6691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 118.003061][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 119.726762][ T6734] smc: net device bond0 applied user defined pnetid SYZ0 [ 119.738752][ T6737] smc: net device bond0 erased user defined pnetid SYZ0 [ 120.421140][ T6754] syzkaller0: entered promiscuous mode [ 120.426792][ T6754] syzkaller0: entered allmulticast mode [ 120.448878][ T6764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.373'. [ 120.464001][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.371'. [ 122.282350][ T6772] smc: net device bond0 applied user defined pnetid SYZ0 [ 122.292129][ T6775] smc: net device bond0 erased user defined pnetid SYZ0 [ 122.631443][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 122.755851][ T6801] syz.2.389[6801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.755973][ T6801] syz.2.389[6801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.774466][ T6801] syz.2.389[6801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.068330][ T6810] smc: net device bond0 applied user defined pnetid SYZ0 [ 123.099796][ T6810] smc: net device bond0 erased user defined pnetid SYZ0 [ 125.893023][ T6866] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.501789][ T6857] ip6gre2: entered allmulticast mode [ 127.538119][ T6866] bridge0: adding interface bridge_slave_1 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.571994][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.591005][ T6868] ip6gre1: entered allmulticast mode [ 127.728847][ T6881] syz.1.417[6881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.728974][ T6881] syz.1.417[6881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.763274][ T6881] syz.1.417[6881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.784643][ T6886] syz.2.418[6886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.797540][ T6886] syz.2.418[6886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.818262][ T6886] syz.2.418[6886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.820524][ T6922] bridge0: port 3(gretap0) entered disabled state [ 129.065559][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.073547][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.308445][ T6922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.331069][ T6922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.459834][ T6922] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.469653][ T6922] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.479330][ T6922] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.489347][ T6922] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.610694][ T6934] netlink: 'syz.2.442': attribute type 4 has an invalid length. [ 129.618791][ T6934] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.442'. [ 129.833762][ T6950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.447'. [ 129.866283][ T6950] netlink: 44 bytes leftover after parsing attributes in process `syz.3.447'. [ 130.455091][ T6976] pim6reg1: entered promiscuous mode [ 130.463051][ T6976] pim6reg1: entered allmulticast mode [ 131.102806][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.474'. [ 131.133243][ T7000] vlan2: entered allmulticast mode [ 131.976237][ T7030] vlan2: entered allmulticast mode [ 132.596988][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.492'. [ 133.110334][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121719][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.360695][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.506'. [ 133.423339][ T7078] netlink: 164 bytes leftover after parsing attributes in process `syz.4.507'. [ 133.446351][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 133.652184][ T7090] netlink: 100 bytes leftover after parsing attributes in process `syz.3.513'. [ 133.664853][ T7090] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 133.900556][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 134.115028][ T7101] ip6tnl1: entered promiscuous mode [ 135.268766][ T7144] sit0: entered promiscuous mode [ 135.273940][ T7144] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 135.316049][ T7144] __nla_validate_parse: 1 callbacks suppressed [ 135.316071][ T7144] netlink: 1 bytes leftover after parsing attributes in process `syz.4.536'. [ 135.355078][ T7145] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.688332][ T7163] warning: `syz.2.543' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.223437][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.231064][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.278147][ T7184] bridge0: entered allmulticast mode [ 136.382322][ T7187] bridge_slave_1: left allmulticast mode [ 136.394887][ T7187] bridge_slave_1: left promiscuous mode [ 136.403645][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.434655][ T7187] bridge_slave_0: left allmulticast mode [ 136.445118][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.446972][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 140.653332][ T7298] tipc: Started in network mode [ 140.680029][ T7298] tipc: Node identity 76a8382e3e39, cluster identity 4711 [ 140.702153][ T7298] tipc: Enabled bearer , priority 0 [ 140.848977][ T7298] syzkaller0: entered promiscuous mode [ 140.868648][ T7298] syzkaller0: entered allmulticast mode [ 140.881779][ T7298] tipc: Resetting bearer [ 140.967025][ T7297] tipc: Resetting bearer [ 141.155850][ T7312] syz.3.611[7312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.155995][ T7312] syz.3.611[7312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.184246][ T7312] syz.3.611[7312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.830537][ T25] tipc: Node number set to 1217476654 [ 143.449103][ T7297] tipc: Disabling bearer [ 143.462825][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.473286][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.480497][ T7335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.494687][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.002419][ T7367] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.634'. [ 144.149659][ T7374] netlink: 'syz.4.638': attribute type 29 has an invalid length. [ 144.178677][ T7374] netlink: 'syz.4.638': attribute type 29 has an invalid length. [ 144.373893][ T7383] sit0: entered promiscuous mode [ 144.401194][ T7383] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 144.415798][ T7383] netlink: 1 bytes leftover after parsing attributes in process `syz.1.642'. [ 144.472306][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.647'. [ 144.498328][ T7386] pim6reg1: entered promiscuous mode [ 144.503697][ T7386] pim6reg1: entered allmulticast mode [ 144.616709][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 144.758476][ T7396] netlink: 'syz.0.650': attribute type 2 has an invalid length. [ 144.766325][ T7396] netlink: 'syz.0.650': attribute type 4 has an invalid length. [ 144.789209][ T7398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.651'. [ 145.002261][ T7410] ip6gre3: entered allmulticast mode [ 145.113679][ T7414] netlink: 'syz.3.659': attribute type 27 has an invalid length. [ 145.320450][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.328041][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.595338][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.633202][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.752202][ T7414] veth0_vlan: left allmulticast mode [ 145.967598][ T7414] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.976565][ T7414] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.008572][ T7414] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.023711][ T7414] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.124740][ T7414] ip6gre1: left allmulticast mode [ 146.206468][ T7421] netlink: 'syz.2.662': attribute type 29 has an invalid length. [ 146.482928][ T7453] syz.3.671[7453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.483035][ T7453] syz.3.671[7453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.555866][ T7453] syz.3.671[7453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.587150][ T7453] syz.3.671[7453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.595095][ T7454] pim6reg1: entered promiscuous mode [ 146.626260][ T7454] pim6reg1: entered allmulticast mode [ 146.643431][ T7453] syz.3.671[7453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.643564][ T7453] syz.3.671[7453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.203452][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 148.892102][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 150.736098][ T7550] netlink: 'syz.1.720': attribute type 29 has an invalid length. [ 151.099702][ T7566] tipc: Started in network mode [ 151.105016][ T7566] tipc: Node identity f667c566511, cluster identity 4711 [ 151.129800][ T7566] tipc: Enabled bearer , priority 0 [ 151.235811][ T7559] tipc: Disabling bearer [ 151.405651][ T7577] netlink: 'syz.3.733': attribute type 29 has an invalid length. [ 151.443547][ T7577] netlink: 'syz.3.733': attribute type 29 has an invalid length. [ 151.465958][ T7577] netlink: 'syz.3.733': attribute type 29 has an invalid length. [ 152.062455][ T7595] syzkaller0: entered promiscuous mode [ 152.069330][ T7595] syzkaller0: entered allmulticast mode [ 152.082502][ T7600] vlan0: entered promiscuous mode [ 153.303628][ T29] audit: type=1107 audit(1737134759.564:3): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 154.436593][ T7622] tipc: Enabling of bearer rejected, failed to enable media [ 154.453674][ T7644] netlink: 'syz.3.759': attribute type 29 has an invalid length. [ 156.535357][ T7669] netlink: 'syz.0.770': attribute type 29 has an invalid length. [ 156.545652][ T7674] bridge_slave_1: entered allmulticast mode [ 156.929006][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 156.950108][ T7688] gretap0: left allmulticast mode [ 156.955313][ T7688] gretap0: left promiscuous mode [ 156.961536][ T7688] bridge0: port 3(gretap0) entered disabled state [ 157.014954][ T7688] bridge_slave_1: left allmulticast mode [ 157.021315][ T7688] bridge_slave_1: left promiscuous mode [ 157.038196][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.064880][ T7688] bridge_slave_0: left allmulticast mode [ 157.085004][ T7688] bridge_slave_0: left promiscuous mode [ 157.111286][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.192307][ T7700] netlink: 'syz.1.783': attribute type 29 has an invalid length. [ 157.205562][ T7702] netlink: 'syz.1.783': attribute type 29 has an invalid length. [ 157.224745][ T7700] netlink: 'syz.1.783': attribute type 29 has an invalid length. [ 157.403433][ T7706] bridge0: adding interface bridge_slave_1 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.421616][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.528508][ T7711] wg2: entered promiscuous mode [ 157.547768][ T7711] wg2: entered allmulticast mode [ 160.002696][ T7745] bridge_slave_1: entered allmulticast mode [ 160.690262][ T7775] pim6reg1: entered promiscuous mode [ 160.695822][ T7775] pim6reg1: entered allmulticast mode [ 160.931459][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.814'. [ 160.980855][ T7785] netlink: 52 bytes leftover after parsing attributes in process `syz.3.814'. [ 161.044103][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 161.378004][ T7800] pim6reg1: entered promiscuous mode [ 161.397524][ T7800] pim6reg1: entered allmulticast mode [ 162.298380][ T7830] pim6reg1: entered promiscuous mode [ 162.303769][ T7830] pim6reg1: entered allmulticast mode [ 162.826418][ T7854] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 162.846718][ T7854] syzkaller0: linktype set to 821 [ 162.870024][ T7857] wg2: entered promiscuous mode [ 162.877442][ T7857] wg2: entered allmulticast mode [ 163.447060][ T7880] macsec0: entered promiscuous mode [ 163.676104][ T7884] syzkaller0: entered promiscuous mode [ 163.692011][ T7884] syzkaller0: entered allmulticast mode [ 167.300193][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 167.317524][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 168.458282][ T7914] syz_tun: entered promiscuous mode [ 168.464648][ T7914] batadv_slave_0: entered promiscuous mode [ 168.472547][ T7914] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 168.513306][ T7914] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.554505][ T7914] hsr1: entered allmulticast mode [ 168.559992][ T7914] syz_tun: entered allmulticast mode [ 168.583954][ T7914] batadv_slave_0: entered allmulticast mode [ 168.884421][ T7935] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 169.000691][ T7937] vlan0: entered allmulticast mode [ 169.592921][ C0] hrtimer: interrupt took 8276765 ns [ 173.017739][ T7988] syz.4.906 uses obsolete (PF_INET,SOCK_PACKET) [ 189.152485][ T8045] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.808319][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.819556][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.828218][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.838765][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.846525][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 189.854639][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.083469][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.093093][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.101825][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.111583][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.125773][ T5848] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 190.133729][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.225701][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.243262][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.252318][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.261799][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.269732][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 190.277167][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.404927][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 191.898740][ T54] Bluetooth: hci5: command tx timeout [ 192.217519][ T54] Bluetooth: hci6: command tx timeout [ 192.297478][ T54] Bluetooth: hci7: command tx timeout [ 193.977482][ T54] Bluetooth: hci5: command tx timeout [ 194.297451][ T54] Bluetooth: hci6: command tx timeout [ 194.377456][ T54] Bluetooth: hci7: command tx timeout [ 194.541755][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549461][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.057431][ T54] Bluetooth: hci5: command tx timeout [ 196.377428][ T54] Bluetooth: hci6: command tx timeout [ 196.457461][ T54] Bluetooth: hci7: command tx timeout [ 209.253894][ T54] Bluetooth: hci5: command tx timeout [ 209.259532][ T54] Bluetooth: hci6: command tx timeout [ 209.264990][ T54] Bluetooth: hci7: command tx timeout [ 209.969791][ T5836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 210.015058][ T5836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 210.032772][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 210.162902][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 210.357907][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 210.372820][ T5836] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 210.383039][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 224.139586][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 224.146209][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 224.153238][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 224.159944][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 224.166020][ T5836] Bluetooth: hci8: command tx timeout [ 243.009907][ T5144] Bluetooth: hci8: command tx timeout [ 255.980097][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.986458][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.669483][ T5836] Bluetooth: hci8: command tx timeout [ 265.454951][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 265.467122][ T5847] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 265.476606][ T5847] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 265.489003][ T5847] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 265.498217][ T5847] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 265.507172][ T5847] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 265.515056][ T5847] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 265.522667][ T5847] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 265.543957][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 265.552926][ T5847] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 265.561602][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 265.569103][ T5847] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 265.579955][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 265.587463][ T5847] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 265.598009][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 265.605548][ T5847] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 265.614575][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.622228][ T5847] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 265.686623][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 265.696983][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 265.707444][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 265.719355][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 265.728380][ T5847] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 265.736587][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 265.744093][ T5836] Bluetooth: hci8: command tx timeout [ 267.578665][ T8111] Bluetooth: hci10: command tx timeout [ 267.657559][ T5846] Bluetooth: hci9: command tx timeout [ 267.663807][ T8111] Bluetooth: hci3: command tx timeout [ 267.817522][ T8111] Bluetooth: hci11: command tx timeout [ 269.659901][ T8111] Bluetooth: hci10: command tx timeout [ 269.747426][ T8111] Bluetooth: hci3: command tx timeout [ 269.752902][ T8111] Bluetooth: hci9: command tx timeout [ 269.897660][ T8111] Bluetooth: hci11: command tx timeout [ 270.268136][ T5846] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 270.285221][ T5846] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 270.293688][ T5846] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 270.323067][ T5846] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 270.331100][ T5846] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 270.339200][ T5846] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 271.741417][ T8111] Bluetooth: hci10: command tx timeout [ 271.817480][ T5846] Bluetooth: hci3: command tx timeout [ 271.823111][ T8111] Bluetooth: hci9: command tx timeout [ 271.978654][ T8111] Bluetooth: hci11: command tx timeout [ 272.377497][ T8111] Bluetooth: hci12: command tx timeout [ 273.817381][ T8111] Bluetooth: hci10: command tx timeout [ 273.899056][ T5846] Bluetooth: hci3: command tx timeout [ 273.904652][ T8111] Bluetooth: hci9: command tx timeout [ 274.057620][ T8111] Bluetooth: hci11: command tx timeout [ 274.457578][ T8111] Bluetooth: hci12: command tx timeout [ 276.537379][ T8111] Bluetooth: hci12: command tx timeout [ 278.617622][ T8111] Bluetooth: hci12: command tx timeout [ 332.900454][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.906822][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.597742][ T5836] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 334.287607][ T8125] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 334.295862][ T8125] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 334.603673][ T8129] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 334.631461][ T8133] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 334.645789][ T8133] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 334.655454][ T8133] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 334.669912][ T8133] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 334.679193][ T8133] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 334.696957][ T8133] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 334.704614][ T8133] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 334.714137][ T8133] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 334.722682][ T8133] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 334.746964][ T8133] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 334.754469][ T8133] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 334.769810][ T8136] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 334.784324][ T8133] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 334.794088][ T8133] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 334.803406][ T8136] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 334.812375][ T8136] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 334.819982][ T8136] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 334.835712][ T8133] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 334.846039][ T8133] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 334.857820][ T8133] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 334.865573][ T8133] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 334.881508][ T8133] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 334.889080][ T8133] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 334.896279][ T8133] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 334.913000][ T8133] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 334.922006][ T8133] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 335.024203][ T5844] Bluetooth: hci8: command 0x0406 tx timeout [ 335.030621][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 335.036697][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 335.043592][ T5844] Bluetooth: hci7: command 0x0406 tx timeout [ 368.707216][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 368.714434][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7966/1:b.el [ 368.722796][ C1] rcu: (detected by 1, t=10502 jiffies, g=24089, q=2784 ncpus=2) [ 368.730641][ C1] task:syz.3.896 state:R running task stack:23544 pid:7966 tgid:7965 ppid:5830 flags:0x00004006 [ 368.743639][ C1] Call Trace: [ 368.747094][ C1] [ 368.750059][ C1] __schedule+0x1850/0x4c30 [ 368.754627][ C1] ? mark_lock+0x9a/0x360 [ 368.758996][ C1] ? count_memcg_event_mm+0x94/0x420 [ 368.764342][ C1] ? __pfx___schedule+0x10/0x10 [ 368.769323][ C1] ? count_memcg_event_mm+0x94/0x420 [ 368.774678][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.780705][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 368.786030][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 368.791181][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 368.796937][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.803320][ C1] ? llist_add_batch+0x143/0x270 [ 368.808305][ C1] irqentry_exit+0x5e/0x90 [ 368.812757][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.818790][ C1] RIP: 0010:unit_alloc+0x2ca/0x360 [ 368.823945][ C1] Code: 89 ec e8 19 c7 d6 ff e9 66 fe ff ff e8 0f c7 d6 ff e8 8a ff 03 0a 4d 85 ed 74 dd e8 00 c7 d6 ff fb 48 c7 44 24 20 0e 36 e0 45 <48> 8b 44 24 18 49 c7 04 04 00 00 00 00 66 41 c7 44 04 09 00 00 41 [ 368.843694][ C1] RSP: 0018:ffffc9000c697980 EFLAGS: 00000246 [ 368.849804][ C1] RAX: ffffffff81c8bb70 RBX: 0000000000000000 RCX: 0000000000080000 [ 368.857806][ C1] RDX: ffffc9000d56a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 368.866064][ C1] RBP: ffffc9000c697a60 R08: ffffffff81c8bb39 R09: 1ffffffff2034b1e [ 368.874094][ C1] R10: dffffc0000000000 R11: fffffbfff2034b1f R12: dffffc0000000000 [ 368.882120][ C1] R13: 0000000000000200 R14: ffffe8ffffc41250 R15: 0000000000000046 [ 368.890142][ C1] ? unit_alloc+0x289/0x360 [ 368.894684][ C1] ? unit_alloc+0x2c0/0x360 [ 368.899241][ C1] ? __pfx_unit_alloc+0x10/0x10 [ 368.904156][ C1] bpf_mem_cache_alloc+0x83/0xb0 [ 368.909162][ C1] trie_update_elem+0xc1/0xc20 [ 368.913983][ C1] ? __pfx_bpf_obj_pin_uptrs+0x10/0x10 [ 368.919489][ C1] bpf_map_update_value+0x533/0x5c0 [ 368.924740][ C1] generic_map_update_batch+0x60d/0x900 [ 368.930343][ C1] ? __pfx_generic_map_update_batch+0x10/0x10 [ 368.936449][ C1] ? __fget_files+0x395/0x410 [ 368.941182][ C1] ? __fget_files+0x2a/0x410 [ 368.945818][ C1] ? __pfx_generic_map_update_batch+0x10/0x10 [ 368.951921][ C1] bpf_map_do_batch+0x39a/0x660 [ 368.957533][ C1] __sys_bpf+0x377/0x810 [ 368.962447][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 368.967272][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.973296][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.979660][ C1] ? do_syscall_64+0x100/0x230 [ 368.984468][ C1] __x64_sys_bpf+0x7c/0x90 [ 368.988932][ C1] do_syscall_64+0xf3/0x230 [ 368.993476][ C1] ? clear_bhb_loop+0x35/0x90 [ 368.998191][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.004128][ C1] RIP: 0033:0x7fb908985d29 [ 369.008588][ C1] RSP: 002b:00007fb909709038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.017129][ C1] RAX: ffffffffffffffda RBX: 00007fb908b75fa0 RCX: 00007fb908985d29 [ 369.025131][ C1] RDX: 0000000000000038 RSI: 0000000020000000 RDI: 000000000000001a [ 369.033139][ C1] RBP: 00007fb908a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 369.041213][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.049218][ C1] R13: 0000000000000000 R14: 00007fb908b75fa0 R15: 00007ffdd77e07f8 [ 369.057240][ C1] [ 369.060285][ C1] rcu: rcu_preempt kthread starved for 3358 jiffies! g24089 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 369.071438][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 369.081440][ C1] rcu: RCU grace-period kthread stack dump: [ 369.087369][ C1] task:rcu_preempt state:R running task stack:25360 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 369.099177][ C1] Call Trace: [ 369.102506][ C1] [ 369.105555][ C1] __schedule+0x1850/0x4c30 [ 369.110127][ C1] ? __pfx___schedule+0x10/0x10 [ 369.115017][ C1] ? __pfx_lock_release+0x10/0x10 [ 369.120090][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.126463][ C1] ? schedule+0x90/0x320 [ 369.130741][ C1] schedule+0x14b/0x320 [ 369.134967][ C1] schedule_timeout+0x15a/0x290 [ 369.140134][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 369.145549][ C1] ? __pfx_process_timeout+0x10/0x10 [ 369.151249][ C1] ? prepare_to_swait_event+0x330/0x350 [ 369.156935][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 369.161824][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 369.167077][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 369.173272][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 369.178597][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 369.184560][ C1] ? finish_swait+0xd4/0x1e0 [ 369.189753][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 369.194448][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 369.199821][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 369.205965][ C1] ? __kthread_parkme+0x169/0x1d0 [ 369.211261][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 369.216616][ C1] kthread+0x2f0/0x390 [ 369.221192][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 369.227263][ C1] ? __pfx_kthread+0x10/0x10 [ 369.232087][ C1] ret_from_fork+0x4b/0x80 [ 369.236540][ C1] ? __pfx_kthread+0x10/0x10 [ 369.241291][ C1] ret_from_fork_asm+0x1a/0x30 [ 369.246293][ C1] [ 369.249736][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 369.256723][ C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 369.267928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 369.279340][ C1] Workqueue: events_unbound toggle_allocation_gate [ 369.286187][ C1] RIP: 0010:smp_call_function_many_cond+0x19fc/0x2c60 [ 369.293632][ C1] Code: 01 31 ff e8 c6 e6 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 71 e2 0b 00 eb 38 f3 90 42 0f b6 04 23 84 c0 75 11 <41> f7 45 00 01 00 00 00 74 1e e8 55 e2 0b 00 eb e4 44 89 e9 80 e1 [ 369.313295][ C1] RSP: 0018:ffffc900001076e0 EFLAGS: 00000246 [ 369.319407][ C1] RAX: 0000000000000000 RBX: 1ffff110170c8c81 RCX: ffff88801c283c00 [ 369.327631][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 369.335840][ C1] RBP: ffffc900001078e0 R08: ffffffff81939fea R09: 1ffffffff2858310 [ 369.344059][ C1] R10: dffffc0000000000 R11: fffffbfff2858311 R12: dffffc0000000000 [ 369.352084][ C1] R13: ffff8880b8646408 R14: ffff8880b873fa80 R15: 0000000000000000 [ 369.360093][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 369.369179][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.375793][ C1] CR2: 000055b17d2bd324 CR3: 000000000e736000 CR4: 00000000003526f0 [ 369.383797][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.391802][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 369.399980][ C1] Call Trace: [ 369.403288][ C1] [ 369.406509][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 369.412890][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 369.419110][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 369.424965][ C1] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 369.431253][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 369.437901][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 369.444196][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 369.449622][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 369.455302][ C1] ? acct_account_cputime+0x207/0x210 [ 369.460723][ C1] ? update_process_times+0x242/0x2f0 [ 369.466185][ C1] ? tick_nohz_handler+0x37c/0x500 [ 369.471367][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 369.476865][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 369.482302][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 369.488099][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 369.493086][ C1] ? read_tsc+0x9/0x20 [ 369.497194][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 369.503406][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 369.508594][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 369.514792][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 369.520644][ C1] [ 369.523605][ C1] [ 369.526566][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.532776][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 369.539002][ C1] ? smp_call_function_many_cond+0x19fc/0x2c60 [ 369.545215][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 369.550345][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 369.556552][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 369.562928][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 369.568694][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 369.574103][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 369.579170][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 369.584328][ C1] text_poke_bp_batch+0x726/0xb30 [ 369.589406][ C1] ? kmem_cache_alloc_bulk_noprof+0x157/0x7c0 [ 369.595518][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 369.601123][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 369.607531][ C1] ? process_scheduled_works+0x976/0x1840 [ 369.613307][ C1] text_poke_finish+0x30/0x50 [ 369.618079][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 369.624276][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 369.630356][ C1] static_key_enable+0x1a/0x20 [ 369.635174][ C1] toggle_allocation_gate+0xbc/0x260 [ 369.640524][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 369.646486][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.652864][ C1] process_scheduled_works+0xa66/0x1840 [ 369.658525][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.664587][ C1] ? assign_work+0x364/0x3d0 [ 369.669226][ C1] worker_thread+0x870/0xd30 [ 369.673866][ C1] ? __kthread_parkme+0x169/0x1d0 [ 369.678977][ C1] ? __pfx_worker_thread+0x10/0x10 [ 369.684126][ C1] kthread+0x2f0/0x390 [ 369.688239][ C1] ? __pfx_worker_thread+0x10/0x10 [ 369.693384][ C1] ? __pfx_kthread+0x10/0x10 [ 369.698012][ C1] ret_from_fork+0x4b/0x80 [ 369.702458][ C1] ? __pfx_kthread+0x10/0x10 [ 369.707199][ C1] ret_from_fork_asm+0x1a/0x30 [ 369.712051][ C1]