last executing test programs: 4.25052107s ago: executing program 4 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.647085937s ago: executing program 0 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.541537882s ago: executing program 3 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a965b0014040000000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 2.318719622s ago: executing program 3 (id=38): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1ab0000000000000e0032"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.096311385s ago: executing program 0 (id=41): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 2.046866194s ago: executing program 3 (id=42): syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000980)=ANY=[], 0x20) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 1.735029836s ago: executing program 2 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.691346666s ago: executing program 0 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000ab40000001a0a01010000000000000000020000058a000600f61d287272f0f7af3f9bebd7e30ee0759c16a992021e588ca5e9963db9af70a7e7876a0df68ed743c91e29ece6c4882d7d1da0e36882336c30295a0abfeb4b62c048f5aef8284fcc5238328a8e3ba07b2d8522d5d8bbb985b7a8b37ec013ff46a49bcdf3807d1b5d67e892044cbd0d9edaf1e2f8ff2a4d542566caf80162c855df86d6bd71bf00000c0004"], 0x3c48}, 0x1, 0x0, 0x0, 0x40000}, 0x800c080) 1.689672345s ago: executing program 4 (id=47): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f0000000200)}, 0x20) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="826c88feceda", 0x6}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 1.477375287s ago: executing program 0 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a965b0014040000000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 1.390922325s ago: executing program 2 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001"], 0xac}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 1.375266425s ago: executing program 4 (id=51): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x200100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000280)=@can={{0x4}, 0x0, 0x2, 0x0, 0x0, "44b07d1e9b1d900c"}, 0x10}}, 0x0) 1.336047893s ago: executing program 3 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.238082027s ago: executing program 0 (id=53): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 1.178995237s ago: executing program 2 (id=54): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a800160008000140090011", 0x3b}, {&(0x7f0000000a80)="a8e97cb1dfd5f0137dd8f10a1aab92eee4ed291d6908d5efd16a0270f3b39b38f7852b63b01ca5c0908b65a61128c911e4fe279efcf91f0e7ddd287ecd3407b1dc1d6a169a39c77420aca50c0cf3ec80cf4cb16b27d5893cd7acaef29a6bf231b5987b0d61778521dfa07c73ba5060b750c254beb23884af33e3bb1a3d29a6d9a42b0286ea1406ac6415300252c6e42d889f60ebd3ef56c3d5", 0x99}], 0x2}, 0x0) 1.132451949s ago: executing program 4 (id=55): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000026aaaaaaaaaabb0800"], 0x0) 1.095491473s ago: executing program 2 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f00000017c0)='%pi6 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) 946.876438ms ago: executing program 4 (id=58): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0x14, 0xfe, 0x80, 0x0, 0xfe, 0xff, 0x0, 0x10}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r1, @in={{0x2, 0x4e22, @broadcast}}, [0x0, 0x1, 0xa80d, 0xb8a, 0xe1e6, 0x2, 0x2, 0x3, 0x2f, 0x966, 0x1, 0x1, 0x2, 0x4724, 0x4]}, &(0x7f0000000040)=0x100) 946.61237ms ago: executing program 2 (id=59): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 946.336934ms ago: executing program 3 (id=60): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000ab40000001a0a01010000000000000000020000058a000600f61d287272f0f7af3f9bebd7e30ee0759c16a992021e588ca5e9963db9af70a7e7876a0df68ed743c91e29ece6c4882d7d1da0e36882336c30295a0abfeb4b62c048f5aef8284fcc5238328a8e3ba07b2d8522d5d8bbb985b7a8b37ec013ff46a49bcdf3807d1b5d67e892044cbd0d9edaf1e2f8ff2a4d542566caf80162c855df86d6bd71bf00000c0004"], 0x3c48}, 0x1, 0x0, 0x0, 0x40000}, 0x800c080) 711.077689ms ago: executing program 4 (id=62): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 710.745994ms ago: executing program 3 (id=63): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x90}}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000080)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="010000001000"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001400000028f4eac00ce2e50c05c7cf1f8e22696"], 0x38}, 0x2}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="2502000020800600"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) 691.826353ms ago: executing program 0 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xf) r3 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d1fca4f1d0461442e12c4d90f415ec86aa74e137467ce700772d98322478e00f9", 0x22}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x22}], 0x1}, 0x4c2103a0) 595.955844ms ago: executing program 1 (id=65): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, 0x1412, 0x1, 0x2, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}}, 0x80) 427.0981ms ago: executing program 1 (id=66): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 307.602951ms ago: executing program 1 (id=67): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 181.326199ms ago: executing program 1 (id=68): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 89.867013ms ago: executing program 2 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000001f001000440000000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000002040), 0x288, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) 31.064785ms ago: executing program 1 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a965b0014040000000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 0s ago: executing program 1 (id=71): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unshare(0x2040600) unshare(0x2000400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 63.275941][ T5819] cgroup: Unknown subsys name 'net' [ 63.440566][ T5819] cgroup: Unknown subsys name 'cpuset' [ 63.449302][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.953216][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.155188][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.165263][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.172988][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.188466][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.209338][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.216688][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.348549][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.356249][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.366471][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.376751][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.385749][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.393214][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.401519][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.419127][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.433249][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.444604][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.457736][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.458566][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.472080][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.479566][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.487633][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.488648][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.496238][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.502096][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.509627][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.523726][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.524842][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.538721][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.547000][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.555728][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.789806][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 68.014960][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.022967][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.030732][ T5830] bridge_slave_0: entered allmulticast mode [ 68.038189][ T5830] bridge_slave_0: entered promiscuous mode [ 68.048671][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.055859][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.064210][ T5830] bridge_slave_1: entered allmulticast mode [ 68.071374][ T5830] bridge_slave_1: entered promiscuous mode [ 68.105599][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 68.115729][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 68.127844][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.140050][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.149471][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 68.220376][ T5830] team0: Port device team_slave_0 added [ 68.257382][ T5830] team0: Port device team_slave_1 added [ 68.365656][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.372841][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.398957][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.410885][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.418262][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.425444][ T5840] bridge_slave_0: entered allmulticast mode [ 68.432463][ T5840] bridge_slave_0: entered promiscuous mode [ 68.440637][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.447843][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.455137][ T5840] bridge_slave_1: entered allmulticast mode [ 68.462568][ T5840] bridge_slave_1: entered promiscuous mode [ 68.510031][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.517031][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.543159][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.569912][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.577049][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.584819][ T5835] bridge_slave_0: entered allmulticast mode [ 68.591776][ T5835] bridge_slave_0: entered promiscuous mode [ 68.603579][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.610863][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.618595][ T5834] bridge_slave_0: entered allmulticast mode [ 68.625192][ T5834] bridge_slave_0: entered promiscuous mode [ 68.633281][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.640556][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.648816][ T5834] bridge_slave_1: entered allmulticast mode [ 68.655410][ T5834] bridge_slave_1: entered promiscuous mode [ 68.680063][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.687927][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.695088][ T5835] bridge_slave_1: entered allmulticast mode [ 68.702002][ T5835] bridge_slave_1: entered promiscuous mode [ 68.718179][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 68.740834][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.753309][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.784234][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.798189][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.822210][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.835585][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.884369][ T5830] hsr_slave_0: entered promiscuous mode [ 68.892027][ T5830] hsr_slave_1: entered promiscuous mode [ 68.923603][ T5840] team0: Port device team_slave_0 added [ 68.931968][ T5840] team0: Port device team_slave_1 added [ 68.947618][ T5835] team0: Port device team_slave_0 added [ 68.960985][ T5834] team0: Port device team_slave_0 added [ 68.995054][ T5835] team0: Port device team_slave_1 added [ 69.014993][ T5834] team0: Port device team_slave_1 added [ 69.028731][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.035699][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.062214][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.075363][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.082649][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.108855][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.156697][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.163949][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.190221][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.211340][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.219045][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.245545][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.258225][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.265193][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.291334][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.311529][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.318145][ T5839] Bluetooth: hci0: command tx timeout [ 69.322027][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.351134][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.375626][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.382893][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.390413][ T5842] bridge_slave_0: entered allmulticast mode [ 69.397041][ T5842] bridge_slave_0: entered promiscuous mode [ 69.404804][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.411979][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.419501][ T5842] bridge_slave_1: entered allmulticast mode [ 69.426341][ T5842] bridge_slave_1: entered promiscuous mode [ 69.497518][ T5840] hsr_slave_0: entered promiscuous mode [ 69.503690][ T5840] hsr_slave_1: entered promiscuous mode [ 69.510415][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.519142][ T5840] Cannot create hsr debugfs directory [ 69.529636][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.540850][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.557585][ T5839] Bluetooth: hci3: command tx timeout [ 69.596280][ T5835] hsr_slave_0: entered promiscuous mode [ 69.602559][ T5835] hsr_slave_1: entered promiscuous mode [ 69.609282][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.617908][ T5835] Cannot create hsr debugfs directory [ 69.627632][ T5832] Bluetooth: hci2: command tx timeout [ 69.627641][ T5845] Bluetooth: hci1: command tx timeout [ 69.639272][ T5839] Bluetooth: hci4: command tx timeout [ 69.655971][ T5842] team0: Port device team_slave_0 added [ 69.665028][ T5834] hsr_slave_0: entered promiscuous mode [ 69.671456][ T5834] hsr_slave_1: entered promiscuous mode [ 69.677456][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.685033][ T5834] Cannot create hsr debugfs directory [ 69.721618][ T5842] team0: Port device team_slave_1 added [ 69.811704][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.819157][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.845672][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.883202][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.890308][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.916477][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.046641][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.058444][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.078524][ T5842] hsr_slave_0: entered promiscuous mode [ 70.085575][ T5842] hsr_slave_1: entered promiscuous mode [ 70.091734][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.099352][ T5842] Cannot create hsr debugfs directory [ 70.117606][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.154502][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.236940][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.264322][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.274246][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.300057][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.366808][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.380289][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.416856][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.435179][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.474629][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.503592][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.513812][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.537993][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.575837][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.610715][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.621593][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.634026][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.698714][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.711815][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.775232][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.801332][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.812789][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.841360][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.848788][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.868825][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.875940][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.894825][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.908752][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.915869][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.936917][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.944052][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.954935][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.962042][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.984905][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.022667][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.029795][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.093257][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.115320][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.164460][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.204284][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.211446][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.243545][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.250733][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.261323][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.268464][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.283867][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.291016][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.387753][ T5839] Bluetooth: hci0: command tx timeout [ 71.530377][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.632379][ T5839] Bluetooth: hci3: command tx timeout [ 71.644413][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.645794][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.651475][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.707852][ T5839] Bluetooth: hci4: command tx timeout [ 71.712419][ T5832] Bluetooth: hci2: command tx timeout [ 71.713288][ T5845] Bluetooth: hci1: command tx timeout [ 71.823666][ T5830] veth0_vlan: entered promiscuous mode [ 71.895622][ T5830] veth1_vlan: entered promiscuous mode [ 71.970248][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.979454][ T5830] veth0_macvtap: entered promiscuous mode [ 71.992859][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.013024][ T5830] veth1_macvtap: entered promiscuous mode [ 72.044625][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.123091][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.146296][ T5842] veth0_vlan: entered promiscuous mode [ 72.159062][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.170856][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.181077][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.191264][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.200074][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.219348][ T5834] veth0_vlan: entered promiscuous mode [ 72.235812][ T5842] veth1_vlan: entered promiscuous mode [ 72.261453][ T5834] veth1_vlan: entered promiscuous mode [ 72.323864][ T5840] veth0_vlan: entered promiscuous mode [ 72.380633][ T5835] veth0_vlan: entered promiscuous mode [ 72.389190][ T5842] veth0_macvtap: entered promiscuous mode [ 72.402899][ T5840] veth1_vlan: entered promiscuous mode [ 72.430056][ T5842] veth1_macvtap: entered promiscuous mode [ 72.440384][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.443514][ T5835] veth1_vlan: entered promiscuous mode [ 72.466996][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.468748][ T5834] veth0_macvtap: entered promiscuous mode [ 72.499679][ T5834] veth1_macvtap: entered promiscuous mode [ 72.538905][ T5840] veth0_macvtap: entered promiscuous mode [ 72.539362][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.555243][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.556997][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.578570][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.591706][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.601547][ T5840] veth1_macvtap: entered promiscuous mode [ 72.619749][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.630353][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.642183][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.652724][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.664427][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.674911][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.686986][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.698985][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.734844][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.746695][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.757186][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.767858][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.778973][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.780784][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.790418][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.812230][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.821482][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.830765][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.842843][ T5835] veth0_macvtap: entered promiscuous mode [ 72.862007][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.872212][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.885027][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.896762][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.919857][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.936566][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.954908][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.966037][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.982407][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.993348][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.015738][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.041535][ T5835] veth1_macvtap: entered promiscuous mode [ 73.064624][ T5919] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 73.080630][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.101188][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.111440][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.122346][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.132263][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.162381][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.174383][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.214602][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.237382][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.246152][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.273626][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.300074][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.319014][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.332723][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.345921][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.367466][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.378740][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.389762][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.400726][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.414475][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.467021][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.480976][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.490835][ T5845] Bluetooth: hci0: command tx timeout [ 73.514656][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.525545][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.538326][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.549554][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.559692][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.570393][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.581793][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.612501][ T5929] IPv6: Can't replace route, no match found [ 73.646511][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.661352][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.673049][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.698959][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.723993][ T5845] Bluetooth: hci3: command tx timeout [ 73.773589][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.780599][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.787666][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.796635][ T5845] Bluetooth: hci2: command tx timeout [ 73.802316][ T5839] Bluetooth: hci1: command tx timeout [ 73.802736][ T5832] Bluetooth: hci4: command tx timeout [ 73.814695][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.906594][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.917381][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.992522][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.015096][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.026756][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.047849][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.097777][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.134000][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.231685][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.250355][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.386454][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.416514][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.762603][ T5954] syz.3.18: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 74.779753][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz.3.18 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 74.779781][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.779792][ T5954] Call Trace: [ 74.779799][ T5954] [ 74.779808][ T5954] dump_stack_lvl+0x241/0x360 [ 74.779838][ T5954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.779861][ T5954] ? __pfx__printk+0x10/0x10 [ 74.779885][ T5954] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 74.779911][ T5954] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 74.779939][ T5954] warn_alloc+0x278/0x410 [ 74.779963][ T5954] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 74.779984][ T5954] ? __pfx_warn_alloc+0x10/0x10 [ 74.780006][ T5954] ? kasan_save_track+0x3f/0x80 [ 74.780026][ T5954] ? __kasan_kmalloc+0x98/0xb0 [ 74.780050][ T5954] ? xsk_setsockopt+0x4aa/0x810 [ 74.780068][ T5954] ? do_sock_setsockopt+0x3af/0x720 [ 74.780091][ T5954] ? __x64_sys_setsockopt+0x1ee/0x280 [ 74.780111][ T5954] ? do_syscall_64+0xf3/0x230 [ 74.780134][ T5954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.780170][ T5954] __vmalloc_node_range_noprof+0x126/0x1380 [ 74.780222][ T5954] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 74.780248][ T5954] ? __kasan_kmalloc+0x98/0xb0 [ 74.780276][ T5954] vmalloc_user_noprof+0x74/0x80 [ 74.780297][ T5954] ? xskq_create+0xb6/0x170 [ 74.780316][ T5954] xskq_create+0xb6/0x170 [ 74.780336][ T5954] xsk_init_queue+0xa1/0x100 [ 74.780359][ T5954] xsk_setsockopt+0x4aa/0x810 [ 74.780380][ T5954] ? __pfx_xsk_setsockopt+0x10/0x10 [ 74.780398][ T5954] ? __pfx_aa_sk_perm+0x10/0x10 [ 74.780429][ T5954] ? aa_sock_opt_perm+0x79/0x120 [ 74.780483][ T5954] ? __pfx_xsk_setsockopt+0x10/0x10 [ 74.780500][ T5954] do_sock_setsockopt+0x3af/0x720 [ 74.780530][ T5954] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 74.780559][ T5954] ? __fget_files+0x395/0x410 [ 74.780586][ T5954] ? __fget_files+0x2a/0x410 [ 74.780623][ T5954] __x64_sys_setsockopt+0x1ee/0x280 [ 74.780651][ T5954] do_syscall_64+0xf3/0x230 [ 74.780676][ T5954] ? clear_bhb_loop+0x35/0x90 [ 74.780703][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.780728][ T5954] RIP: 0033:0x7f8db8d8d169 [ 74.780745][ T5954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.780761][ T5954] RSP: 002b:00007f8db6bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.780783][ T5954] RAX: ffffffffffffffda RBX: 00007f8db8fa5fa0 RCX: 00007f8db8d8d169 [ 74.780797][ T5954] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 74.780809][ T5954] RBP: 00007f8db8e0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 74.780821][ T5954] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.780833][ T5954] R13: 0000000000000000 R14: 00007f8db8fa5fa0 R15: 00007ffc0e3bee08 [ 74.780863][ T5954] [ 74.780871][ T5954] Mem-Info: [ 75.128427][ T5954] active_anon:4746 inactive_anon:0 isolated_anon:0 [ 75.128427][ T5954] active_file:968 inactive_file:38291 isolated_file:0 [ 75.128427][ T5954] unevictable:768 dirty:1385 writeback:0 [ 75.128427][ T5954] slab_reclaimable:9890 slab_unreclaimable:96355 [ 75.128427][ T5954] mapped:28352 shmem:1425 pagetables:897 [ 75.128427][ T5954] sec_pagetables:0 bounce:0 [ 75.128427][ T5954] kernel_misc_reclaimable:0 [ 75.128427][ T5954] free:1346552 free_pcp:376 free_cma:0 [ 75.132186][ T5959] Zero length message leads to an empty skb [ 75.225453][ T5954] Node 0 active_anon:19236kB inactive_anon:0kB active_file:4000kB inactive_file:153108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113616kB dirty:5560kB writeback:0kB shmem:4164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10896kB pagetables:3412kB sec_pagetables:0kB all_unreclaimable? no [ 75.347461][ T5954] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 75.451097][ T5954] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.552363][ T5845] Bluetooth: hci0: command tx timeout [ 75.563926][ T5954] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 75.580299][ T5954] Node 0 DMA32 free:1461516kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19096kB inactive_anon:0kB active_file:4000kB inactive_file:152792kB unevictable:1536kB writepending:5552kB present:3129332kB managed:2549704kB mlocked:0kB bounce:0kB free_pcp:612kB local_pcp:316kB free_cma:0kB [ 75.614672][ T5954] lowmem_reserve[]: 0 0 0 0 0 [ 75.619871][ T5954] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 75.658509][ T5954] lowmem_reserve[]: 0 0 0 0 0 [ 75.663324][ T5954] Node 1 Normal free:3908480kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:548kB local_pcp:300kB free_cma:0kB [ 75.718542][ T5954] lowmem_reserve[]: 0 0 0 0 0 [ 75.723510][ T5954] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 75.737204][ T5954] Node 0 DMA32: 2*4kB (UM) 259*8kB (UE) 23*16kB (UM) 0*32kB 7*64kB (UE) 5*128kB (ME) 1*256kB (E) 0*512kB 4*1024kB (M) 5*2048kB (UM) 352*4096kB (M) = 1459920kB [ 75.787881][ T5845] Bluetooth: hci3: command tx timeout [ 75.813363][ T5954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 75.847753][ T5954] Node 1 Normal: 98*4kB (UME) 57*8kB (UME) 35*16kB (UME) 182*32kB (UME) 97*64kB (UME) 38*128kB (UME) 18*256kB (UME) 13*512kB (UME) 2*1024kB (UM) 7*2048kB (UE) 943*4096kB (M) = 3908480kB [ 75.874702][ T5845] Bluetooth: hci1: command tx timeout [ 75.887385][ T5832] Bluetooth: hci2: command tx timeout [ 75.892851][ T5832] Bluetooth: hci4: command tx timeout [ 75.959977][ T5954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.970992][ T5954] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.001032][ T5954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.027612][ T5954] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.047443][ T5954] 40745 total pagecache pages [ 76.052195][ T5954] 0 pages in swap cache [ 76.064526][ T5965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.064971][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 76.086170][ T5954] Free swap = 124996kB [ 76.095875][ T5954] Total swap = 124996kB [ 76.100533][ T5954] 2097051 pages RAM [ 76.104380][ T5954] 0 pages HighMem/MovableOnly [ 76.112032][ T5954] 427903 pages reserved [ 76.116323][ T5954] 0 pages cma reserved [ 76.196157][ T5988] xt_CT: No such helper "syz1" [ 76.289872][ T5983] vlan2: entered promiscuous mode [ 76.295842][ T5983] vlan2: entered allmulticast mode [ 76.314732][ T5983] hsr_slave_1: entered allmulticast mode [ 76.467612][ T5987] hsr_slave_1 (unregistering): left allmulticast mode [ 76.500086][ T5987] hsr_slave_1 (unregistering): left promiscuous mode [ 76.533921][ T5965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.546143][ T6000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.31'. [ 76.561630][ T6000] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 76.751019][ T5965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.929143][ T5965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.072737][ T6017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.38'. [ 77.276880][ T5965] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.356146][ T5965] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.366824][ T6025] xt_hashlimit: size too large, truncated to 1048576 [ 77.446139][ T5965] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.491275][ T5965] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.527565][ T6027] pim6reg: entered allmulticast mode [ 77.602604][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 77.718664][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 77.964252][ T6044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.50'. [ 78.010064][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.366092][ T6063] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 78.520542][ T6069] vlan2: entered promiscuous mode [ 78.525796][ T6069] vlan2: entered allmulticast mode [ 78.566676][ T6069] hsr_slave_1: entered allmulticast mode [ 78.627930][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 78.771692][ T6069] hsr_slave_1 (unregistering): left allmulticast mode [ 78.773221][ T6081] syz.4.62 uses obsolete (PF_INET,SOCK_PACKET) [ 78.913599][ T6089] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.065565][ T6069] hsr_slave_1 (unregistering): left promiscuous mode [ 79.288976][ T6073] ------------[ cut here ]------------ [ 79.294865][ T6073] WARNING: CPU: 0 PID: 6073 at net/ipv4/udp_offload.c:118 udp_tunnel_update_gro_rcv+0x31d/0x670 [ 79.305504][ T6073] Modules linked in: [ 79.309567][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.4.62 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 79.320183][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.330654][ T6073] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 79.337117][ T6073] Code: 23 48 89 eb e8 f4 44 4f f7 c7 05 aa a7 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 db 44 4f f7 eb 40 e8 d4 44 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 c6 44 4f f7 eb 2b e8 bf 44 4f f7 eb 24 [ 79.357535][ T6073] RSP: 0018:ffffc9000464fc50 EFLAGS: 00010293 [ 79.363664][ T6073] RAX: ffffffff8a72ad2e RBX: 1ffff1100b48f72f RCX: ffff8880304d5a00 [ 79.372583][ T6073] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 79.381013][ T6073] RBP: 1ffff1100b48f72f R08: ffffffff8a72a845 R09: 1ffffffff207a30e [ 79.389243][ T6073] R10: dffffc0000000000 R11: fffffbfff207a30f R12: dffffc0000000000 [ 79.397316][ T6073] R13: 0000000000000001 R14: ffff88805a47b978 R15: 0000000000000000 [ 79.405331][ T6073] FS: 0000555560de8500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 79.414383][ T6073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.421071][ T6073] CR2: 00005555856965c8 CR3: 0000000030a1a000 CR4: 00000000003526f0 [ 79.429131][ T6073] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.437147][ T6073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.445228][ T6073] Call Trace: [ 79.448578][ T6073] [ 79.451543][ T6073] ? __warn+0x165/0x4d0 [ 79.456075][ T6073] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 79.462322][ T6073] ? report_bug+0x2b3/0x500 [ 79.466873][ T6073] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 79.473357][ T6073] ? handle_bug+0x60/0x90 [ 79.477832][ T6073] ? exc_invalid_op+0x1a/0x50 [ 79.482557][ T6073] ? asm_exc_invalid_op+0x1a/0x20 [ 79.487694][ T6073] ? udp_tunnel_update_gro_rcv+0xb5/0x670 [ 79.493473][ T6073] ? udp_tunnel_update_gro_rcv+0x59e/0x670 [ 79.499419][ T6073] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 79.505806][ T6073] udpv6_destroy_sock+0x230/0x2a0 [ 79.510933][ T6073] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 79.516519][ T6073] sk_common_release+0x71/0x2e0 [ 79.521500][ T6073] inet_release+0x17d/0x200 [ 79.526057][ T6073] sock_close+0xbc/0x240 [ 79.530712][ T6073] ? __pfx_sock_close+0x10/0x10 [ 79.535620][ T6073] __fput+0x3e9/0x9f0 [ 79.539735][ T6073] task_work_run+0x24f/0x310 [ 79.544360][ T6073] ? _raw_spin_unlock+0x28/0x50 [ 79.549432][ T6073] ? __pfx_task_work_run+0x10/0x10 [ 79.554623][ T6073] ? syscall_exit_to_user_mode+0xa3/0x340 [ 79.560835][ T6073] syscall_exit_to_user_mode+0x13f/0x340 [ 79.566535][ T6073] do_syscall_64+0x100/0x230 [ 79.571576][ T6073] ? clear_bhb_loop+0x35/0x90 [ 79.576315][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.582331][ T6073] RIP: 0033:0x7f6c3858d169 [ 79.586790][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.606639][ T6073] RSP: 002b:00007ffe88231cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 79.615175][ T6073] RAX: 0000000000000000 RBX: 00007f6c387a7ba0 RCX: 00007f6c3858d169 [ 79.623780][ T6073] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 79.632246][ T6073] RBP: 00007f6c387a7ba0 R08: 00000000000000c8 R09: 0000000a88231fcf [ 79.640339][ T6073] R10: 00000000003ffd14 R11: 0000000000000246 R12: 000000000001366f [ 79.648389][ T6073] R13: 00007f6c387a6160 R14: ffffffffffffffff R15: 00007ffe88231df0 [ 79.656458][ T6073] [ 79.659968][ T6073] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.667273][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.4.62 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 79.677787][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.687850][ T6073] Call Trace: [ 79.691134][ T6073] [ 79.694070][ T6073] dump_stack_lvl+0x241/0x360 [ 79.698763][ T6073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.703971][ T6073] ? __pfx__printk+0x10/0x10 [ 79.708574][ T6073] ? vscnprintf+0x5d/0x90 [ 79.712916][ T6073] panic+0x349/0x880 [ 79.716818][ T6073] ? __warn+0x174/0x4d0 [ 79.720982][ T6073] ? __pfx_panic+0x10/0x10 [ 79.725418][ T6073] __warn+0x344/0x4d0 [ 79.729409][ T6073] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 79.735228][ T6073] report_bug+0x2b3/0x500 [ 79.739565][ T6073] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 79.745476][ T6073] handle_bug+0x60/0x90 [ 79.749646][ T6073] exc_invalid_op+0x1a/0x50 [ 79.754163][ T6073] asm_exc_invalid_op+0x1a/0x20 [ 79.759028][ T6073] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 79.765456][ T6073] Code: 23 48 89 eb e8 f4 44 4f f7 c7 05 aa a7 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 db 44 4f f7 eb 40 e8 d4 44 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 c6 44 4f f7 eb 2b e8 bf 44 4f f7 eb 24 [ 79.785073][ T6073] RSP: 0018:ffffc9000464fc50 EFLAGS: 00010293 [ 79.791155][ T6073] RAX: ffffffff8a72ad2e RBX: 1ffff1100b48f72f RCX: ffff8880304d5a00 [ 79.799151][ T6073] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 79.807165][ T6073] RBP: 1ffff1100b48f72f R08: ffffffff8a72a845 R09: 1ffffffff207a30e [ 79.815158][ T6073] R10: dffffc0000000000 R11: fffffbfff207a30f R12: dffffc0000000000 [ 79.823149][ T6073] R13: 0000000000000001 R14: ffff88805a47b978 R15: 0000000000000000 [ 79.831144][ T6073] ? udp_tunnel_update_gro_rcv+0xb5/0x670 [ 79.836883][ T6073] ? udp_tunnel_update_gro_rcv+0x59e/0x670 [ 79.842714][ T6073] udpv6_destroy_sock+0x230/0x2a0 [ 79.847754][ T6073] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 79.853307][ T6073] sk_common_release+0x71/0x2e0 [ 79.858176][ T6073] inet_release+0x17d/0x200 [ 79.862691][ T6073] sock_close+0xbc/0x240 [ 79.866949][ T6073] ? __pfx_sock_close+0x10/0x10 [ 79.871819][ T6073] __fput+0x3e9/0x9f0 [ 79.875816][ T6073] task_work_run+0x24f/0x310 [ 79.880422][ T6073] ? _raw_spin_unlock+0x28/0x50 [ 79.885290][ T6073] ? __pfx_task_work_run+0x10/0x10 [ 79.890418][ T6073] ? syscall_exit_to_user_mode+0xa3/0x340 [ 79.896149][ T6073] syscall_exit_to_user_mode+0x13f/0x340 [ 79.901795][ T6073] do_syscall_64+0x100/0x230 [ 79.906398][ T6073] ? clear_bhb_loop+0x35/0x90 [ 79.911089][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.916995][ T6073] RIP: 0033:0x7f6c3858d169 [ 79.921427][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.941043][ T6073] RSP: 002b:00007ffe88231cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 79.949557][ T6073] RAX: 0000000000000000 RBX: 00007f6c387a7ba0 RCX: 00007f6c3858d169 [ 79.957537][ T6073] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 79.965522][ T6073] RBP: 00007f6c387a7ba0 R08: 00000000000000c8 R09: 0000000a88231fcf [ 79.973518][ T6073] R10: 00000000003ffd14 R11: 0000000000000246 R12: 000000000001366f [ 79.981496][ T6073] R13: 00007f6c387a6160 R14: ffffffffffffffff R15: 00007ffe88231df0 [ 79.989490][ T6073] [ 79.992672][ T6073] Kernel Offset: disabled [ 79.997057][ T6073] Rebooting in 86400 seconds..