last executing test programs: 5.099081846s ago: executing program 2 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0], 0x64}}, 0x0) 4.890232564s ago: executing program 2 (id=559): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 3.975521045s ago: executing program 2 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c0002800500020007000000080003400026faf508000140000000130800064000000004080004400000006a0900010073797a30000000000900020073797a"], 0x94}}, 0x0) 3.853379927s ago: executing program 2 (id=571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xff, 0x7, 0x6361, 0x0, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x8, 0xb}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4008004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.673876995s ago: executing program 3 (id=574): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x0, 0x4}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x80}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x2c, r7, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000180)="6838c60f05c5b05b69c26c8b93ef27", 0xf}], 0x1}}, {{&(0x7f00000009c0)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c, &(0x7f0000002d40)=[{&(0x7f0000001ac0)="15976e94", 0x4}], 0x1}}], 0x2, 0x20000040) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) epoll_create1(0x0) 3.571537396s ago: executing program 4 (id=577): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a", 0x47}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014004000000001006261746164760000040002800c001a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @random="9881da07fc0b", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "e42fbb", 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x10001, {0x6, 0x6, "3a0100", 0x9, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, [], "8029335287b7a081"}}}}}}}, 0x0) socketpair(0x2b, 0xa, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getaddr={0x20, 0x16, 0x400, 0x70bd2d, 0x25dfdbff, {0x2, 0x18, 0xa0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x410d4}, 0x20000000) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x1}, @sadb_x_sec_ctx={0x1f, 0x18, 0x7, 0x7, 0xef, "d56015c6be61ccd173eb7b2a75efe19f151d46e9e97e99bc59b6ebbbde73cfcfb1f7f91006a83981d5fa24aa0547413cb6f15b90496a3561ed8d0af310ec6d1d8de76d846376fe01218baafd50051704d1510836b2019fc43a60de6a8c11902a2384de46092d21a2936bad12f5f0ec2620688c0a3910f19eac0f2770170ebd62ef86ea4ea593e7b985fd06125ad9b1e8a95c33e37a7badd2b346fe1fc86ef14a4c62abcec76267539da5fbfbd66060f1c1d9bc263276cf65424c8dd5531753ea2f44104928190894d96d3960ca293a5c3f20cce854d42d9f4e202b36eecef0eb8131e87dd0e0784f962625b6c80b85"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_x_policy={0x8, 0x12, 0x2, 0xd145bfd553fee0ef, 0x0, 0x6e6bb8, 0x9, {0x6, 0x32, 0xcb, 0x0, 0x0, 0x1981000, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@loopback}}]}, 0x160}, 0x1, 0x7}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0x3, 0xa333, 0x2]}, &(0x7f0000000080)=0x44) sendmsg$inet(r7, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000", @ANYRES32=0x0, @ANYBLOB="e000000200000000000000001800000000000000100100000c0000004404000100000000"], 0x38}, 0x0) socket$packet(0x11, 0x2, 0x300) r10 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 3.133226841s ago: executing program 2 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0], 0x64}}, 0x0) 3.074345344s ago: executing program 4 (id=582): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 3.007815559s ago: executing program 3 (id=583): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getpid() r1 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000080)=0x4, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59a"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) readv(r1, &(0x7f0000002700)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/146, 0x92}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000026c0)=""/23, 0x17}], 0x7) 2.932045371s ago: executing program 2 (id=584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req={0x2, 0xb, 0x187700, 0x4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6c0800, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x1, 0x3}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x36, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) r8 = socket$inet6(0xa, 0x3, 0x81) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000001840)={0x3, {{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x106}}}, 0x88) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), 0x0}, 0x20) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.813468916s ago: executing program 4 (id=586): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x18, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 2.595640256s ago: executing program 4 (id=589): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, 0x0, 0x10000) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 2.419261623s ago: executing program 4 (id=591): socket(0x25, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000400", @ANYRES32=r0], 0x20}}, 0x0) 2.280244138s ago: executing program 4 (id=593): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x0, 0x4}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x80}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x2c, r7, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000180)="6838c60f05c5b05b69c26c8b93ef27", 0xf}], 0x1}}, {{&(0x7f00000009c0)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c, &(0x7f0000002d40)=[{&(0x7f0000001ac0)="15976e94", 0x4}], 0x1}}], 0x2, 0x20000040) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) epoll_create1(0x0) 1.962715136s ago: executing program 1 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) 1.882569952s ago: executing program 3 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) 1.619826471s ago: executing program 1 (id=597): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="060043076003008cb89e08f086dd", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 1.61174681s ago: executing program 3 (id=598): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 1.449386183s ago: executing program 0 (id=599): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x18, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.24776783s ago: executing program 0 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}]}}]}, 0x40}}, 0x0) 1.012372443s ago: executing program 0 (id=601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f00000000009500000000000000a4d83889990f3f564bc80fdaa5923c261bc97c31a6366117808c9e902e7c47388549163345593898538571ac7bd2f1a8e3176175f8d16358df3689fef989016ae510060b284e384b0f9d76e6276bc7a8d7ed6a777c43f28531049317e88675005fd0199bb5b1042cecaa6a965b4cc7f388a2f65f7102e13502c40fe5b17b78dd48681418be8f1ffb859c0ba6e1e013dc6c8e0d2852"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bind$llc(0xffffffffffffffff, &(0x7f00000006c0)={0x1a, 0x1, 0x7, 0x3d, 0x6, 0x85}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117400000000008510000002000000850c00002b00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 972.372358ms ago: executing program 1 (id=602): unshare(0x22020600) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x2}}], 0xa0}, 0x4000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r2], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 744.481676ms ago: executing program 0 (id=603): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) 619.856582ms ago: executing program 3 (id=604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 461.735994ms ago: executing program 0 (id=605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5, 0x3, 0xded035136f4c42fe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 337.132809ms ago: executing program 3 (id=606): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) shutdown(0xffffffffffffffff, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040005}, 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 296.049618ms ago: executing program 0 (id=607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 204.564881ms ago: executing program 1 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) 104.985407ms ago: executing program 1 (id=609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 0s ago: executing program 1 (id=610): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x18, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 88.906993][ T5786] cgroup: Unknown subsys name 'net' [ 89.147874][ T5786] cgroup: Unknown subsys name 'cpuset' [ 89.203861][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.431701][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.505552][ T1876] cfg80211: failed to load regulatory.db [ 96.675329][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.692638][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.697633][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.699717][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.700173][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.701285][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.707067][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.712259][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.716322][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.717302][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.733092][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.733295][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.735638][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.736012][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.736726][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.737885][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.744341][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.744955][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.749746][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.752243][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.862668][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.874128][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.876049][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.904179][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.913660][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.002053][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 98.053744][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 98.092718][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 98.228479][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 98.313400][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 98.813725][ T5802] Bluetooth: hci2: command tx timeout [ 98.813720][ T61] Bluetooth: hci0: command tx timeout [ 98.813888][ T5802] Bluetooth: hci1: command tx timeout [ 98.892070][ T5802] Bluetooth: hci3: command tx timeout [ 98.982018][ T5802] Bluetooth: hci4: command tx timeout [ 99.058871][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.060015][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.060449][ T5798] bridge_slave_0: entered allmulticast mode [ 99.063841][ T5798] bridge_slave_0: entered promiscuous mode [ 99.247525][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.247796][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.247995][ T5798] bridge_slave_1: entered allmulticast mode [ 99.250752][ T5798] bridge_slave_1: entered promiscuous mode [ 99.344107][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.344311][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.344795][ T5806] bridge_slave_0: entered allmulticast mode [ 99.348206][ T5806] bridge_slave_0: entered promiscuous mode [ 99.583277][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.583390][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.583595][ T5807] bridge_slave_0: entered allmulticast mode [ 99.585740][ T5807] bridge_slave_0: entered promiscuous mode [ 99.588374][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.588516][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.588814][ T5806] bridge_slave_1: entered allmulticast mode [ 99.590979][ T5806] bridge_slave_1: entered promiscuous mode [ 99.875164][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.875304][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.875575][ T5807] bridge_slave_1: entered allmulticast mode [ 99.877636][ T5807] bridge_slave_1: entered promiscuous mode [ 100.078089][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.078528][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.078692][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.078877][ T5799] bridge_slave_0: entered allmulticast mode [ 100.080951][ T5799] bridge_slave_0: entered promiscuous mode [ 100.263801][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.264059][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.264418][ T5813] bridge_slave_0: entered allmulticast mode [ 100.268356][ T5813] bridge_slave_0: entered promiscuous mode [ 100.288477][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.289484][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.289713][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.290086][ T5799] bridge_slave_1: entered allmulticast mode [ 100.297948][ T5799] bridge_slave_1: entered promiscuous mode [ 100.446922][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.447180][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.447315][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.447498][ T5813] bridge_slave_1: entered allmulticast mode [ 100.449735][ T5813] bridge_slave_1: entered promiscuous mode [ 100.616580][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.619973][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.817754][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.892076][ T5804] Bluetooth: hci0: command tx timeout [ 100.892182][ T5802] Bluetooth: hci1: command tx timeout [ 100.902099][ T5802] Bluetooth: hci2: command tx timeout [ 100.972102][ T5802] Bluetooth: hci3: command tx timeout [ 101.007257][ T5798] team0: Port device team_slave_0 added [ 101.017343][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.052250][ T5802] Bluetooth: hci4: command tx timeout [ 101.207100][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.210673][ T5798] team0: Port device team_slave_1 added [ 101.216438][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.305217][ T5806] team0: Port device team_slave_0 added [ 101.308470][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.465739][ T5807] team0: Port device team_slave_0 added [ 101.468328][ T5806] team0: Port device team_slave_1 added [ 101.965021][ T5807] team0: Port device team_slave_1 added [ 102.104231][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.104250][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.104275][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.108587][ T5799] team0: Port device team_slave_0 added [ 102.245372][ T5813] team0: Port device team_slave_0 added [ 102.246735][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.246750][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.246777][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.249284][ T5799] team0: Port device team_slave_1 added [ 102.404031][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.404050][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.404077][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.406986][ T5813] team0: Port device team_slave_1 added [ 102.523727][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.523744][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.523763][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.525148][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.525163][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.525190][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.734133][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.734152][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.734179][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.925932][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.925965][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.925992][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.948597][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.948618][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.948692][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.972159][ T5802] Bluetooth: hci2: command tx timeout [ 102.972199][ T5802] Bluetooth: hci1: command tx timeout [ 102.972227][ T5802] Bluetooth: hci0: command tx timeout [ 103.044020][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.044034][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.044053][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.047928][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.047941][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.047960][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.062836][ T5804] Bluetooth: hci3: command tx timeout [ 103.134019][ T5804] Bluetooth: hci4: command tx timeout [ 103.247773][ T5798] hsr_slave_0: entered promiscuous mode [ 103.249224][ T5798] hsr_slave_1: entered promiscuous mode [ 103.469519][ T5806] hsr_slave_0: entered promiscuous mode [ 103.470671][ T5806] hsr_slave_1: entered promiscuous mode [ 103.471494][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 103.471588][ T5806] Cannot create hsr debugfs directory [ 103.569156][ T5807] hsr_slave_0: entered promiscuous mode [ 103.570237][ T5807] hsr_slave_1: entered promiscuous mode [ 103.575390][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 103.575423][ T5807] Cannot create hsr debugfs directory [ 104.039655][ T5799] hsr_slave_0: entered promiscuous mode [ 104.040645][ T5799] hsr_slave_1: entered promiscuous mode [ 104.041498][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 104.041522][ T5799] Cannot create hsr debugfs directory [ 104.066394][ T5813] hsr_slave_0: entered promiscuous mode [ 104.067514][ T5813] hsr_slave_1: entered promiscuous mode [ 104.068408][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 104.068431][ T5813] Cannot create hsr debugfs directory [ 105.052361][ T5802] Bluetooth: hci1: command tx timeout [ 105.052400][ T5802] Bluetooth: hci2: command tx timeout [ 105.052457][ T5804] Bluetooth: hci0: command tx timeout [ 105.132096][ T5804] Bluetooth: hci3: command tx timeout [ 105.211958][ T5804] Bluetooth: hci4: command tx timeout [ 105.574388][ T5798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.659215][ T5798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.698722][ T5798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.749778][ T5798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.839363][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.870453][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.894678][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.941622][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.090251][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.131654][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.162113][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.216530][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.378624][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.426490][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.459856][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.518659][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.690649][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.691032][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.727048][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.765358][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.805214][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.901207][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.923989][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.965062][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.965234][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.011041][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.011203][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.048722][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.087339][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.090582][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.090817][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.141540][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.141710][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.209233][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.256299][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.256451][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.267693][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.300713][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.300869][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.396715][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.438343][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.467644][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.467801][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.526522][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.526681][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.610667][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.669181][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.670518][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.754885][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.759452][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.885263][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.058460][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.334556][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.406026][ T5806] veth0_vlan: entered promiscuous mode [ 108.470473][ T5806] veth1_vlan: entered promiscuous mode [ 108.553508][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.670343][ T5807] veth0_vlan: entered promiscuous mode [ 108.720145][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.727912][ T5807] veth1_vlan: entered promiscuous mode [ 108.738561][ T5806] veth0_macvtap: entered promiscuous mode [ 108.774371][ T5806] veth1_macvtap: entered promiscuous mode [ 108.839937][ T5799] veth0_vlan: entered promiscuous mode [ 108.857821][ T5798] veth0_vlan: entered promiscuous mode [ 108.881702][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.910129][ T5799] veth1_vlan: entered promiscuous mode [ 108.916947][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.932446][ T5798] veth1_vlan: entered promiscuous mode [ 108.934169][ T5807] veth0_macvtap: entered promiscuous mode [ 108.966966][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.969514][ T5807] veth1_macvtap: entered promiscuous mode [ 108.985727][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.003837][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.010487][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.031353][ T5813] veth0_vlan: entered promiscuous mode [ 109.164765][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.177875][ T5813] veth1_vlan: entered promiscuous mode [ 109.259701][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.273101][ T5799] veth0_macvtap: entered promiscuous mode [ 109.302281][ T5798] veth0_macvtap: entered promiscuous mode [ 109.320775][ T5799] veth1_macvtap: entered promiscuous mode [ 109.326677][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.334389][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.336515][ T5798] veth1_macvtap: entered promiscuous mode [ 109.341143][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.358510][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.468516][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.468552][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.506677][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.544000][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.593439][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.632629][ T5813] veth0_macvtap: entered promiscuous mode [ 109.648631][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.678391][ T5813] veth1_macvtap: entered promiscuous mode [ 109.679517][ T1414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.685800][ T1414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.715770][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.715791][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.720906][ T1414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.762958][ T1414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.768500][ T1414] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.793484][ T1414] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.799108][ T1414] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.846286][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.846309][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.869956][ T1414] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.977621][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.141568][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.156004][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.156023][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.310122][ T5915] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 110.324795][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.329321][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.355824][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.356348][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.356367][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.401257][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.732569][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.732591][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.009391][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.009413][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.107303][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.107325][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.257818][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.257841][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.417854][ T5926] syzkaller0: entered promiscuous mode [ 111.417884][ T5926] syzkaller0: entered allmulticast mode [ 111.550690][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.550713][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.306783][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 112.327797][ T5943] warning: `syz.2.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.704406][ T5953] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'. [ 114.016994][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 114.683684][ T5995] netlink: 148 bytes leftover after parsing attributes in process `syz.1.30'. [ 115.916756][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 115.945054][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 116.339655][ T5860] IPVS: starting estimator thread 0... [ 116.417519][ T6028] bond0: (slave bond_slave_0): Releasing backup interface [ 116.482252][ T6036] IPVS: using max 8 ests per chain, 19200 per kthread [ 116.940222][ T6045] netlink: 'syz.3.49': attribute type 13 has an invalid length. [ 117.568850][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.577831][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.024177][ T6050] syz.0.51 (6050) used greatest stack depth: 18104 bytes left [ 118.266384][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.285529][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.455880][ T6065] tipc: Started in network mode [ 119.455942][ T6065] tipc: Node identity f29e5876927f, cluster identity 4711 [ 119.456571][ T6065] tipc: Enabled bearer , priority 0 [ 119.457713][ T6066] syzkaller0: entered promiscuous mode [ 119.457737][ T6066] syzkaller0: entered allmulticast mode [ 119.483735][ T6078] syz_tun: entered allmulticast mode [ 119.516310][ T6080] dvmrp1: entered allmulticast mode [ 119.522919][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.902659][ T6062] tipc: Resetting bearer [ 120.174859][ T6062] tipc: Disabling bearer [ 120.307724][ T6104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.63'. [ 121.124897][ T6078] syz_tun: left allmulticast mode [ 121.132900][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.148387][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.148733][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.460745][ T6120] netlink: del zone limit has 8 unknown bytes [ 121.714423][ T6121] tipc: Started in network mode [ 121.714458][ T6121] tipc: Node identity 4ec9d1e5c701, cluster identity 4711 [ 121.714670][ T6121] tipc: Enabled bearer , priority 0 [ 121.744610][ T6131] syzkaller0: entered promiscuous mode [ 121.744637][ T6131] syzkaller0: entered allmulticast mode [ 121.757268][ T6134] tipc: Resetting bearer [ 122.042242][ T6140] Bluetooth: MGMT ver 1.23 [ 122.042290][ T6140] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 122.067080][ T6117] tipc: Resetting bearer [ 122.320531][ T6117] tipc: Disabling bearer [ 122.654389][ T6151] netlink: 36 bytes leftover after parsing attributes in process `syz.4.77'. [ 122.691115][ T6153] tipc: Started in network mode [ 122.691149][ T6153] tipc: Node identity b27e99bfe219, cluster identity 4711 [ 122.691356][ T6153] tipc: Enabled bearer , priority 0 [ 122.693449][ T6153] syzkaller0: entered promiscuous mode [ 122.693478][ T6153] syzkaller0: entered allmulticast mode [ 122.759662][ T6158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.78'. [ 123.462255][ T6160] syz_tun: entered allmulticast mode [ 123.487884][ T6163] dvmrp1: entered allmulticast mode [ 123.522732][ T6152] tipc: Resetting bearer [ 123.664132][ T6152] tipc: Disabling bearer [ 123.788917][ T6154] syz_tun: left allmulticast mode [ 123.915420][ T6176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.85'. [ 124.064514][ T6186] tipc: Enabled bearer , priority 0 [ 124.065598][ T6186] syzkaller0: entered promiscuous mode [ 124.065624][ T6186] syzkaller0: entered allmulticast mode [ 124.068953][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 124.212267][ T6190] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 124.212289][ T6190] netlink: 224 bytes leftover after parsing attributes in process `syz.2.89'. [ 124.423977][ T6179] team0: Port device team_slave_1 removed [ 124.539059][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 124.615324][ T6186] tipc: Resetting bearer [ 124.712247][ T6183] tipc: Resetting bearer [ 124.852963][ T6183] tipc: Disabling bearer [ 125.148895][ T44] tipc: Node number set to 1625380982 [ 125.350030][ T6226] netlink: 76 bytes leftover after parsing attributes in process `syz.1.100'. [ 125.350077][ T6226] netlink: 76 bytes leftover after parsing attributes in process `syz.1.100'. [ 125.404931][ T6219] syz_tun: entered allmulticast mode [ 125.470301][ T6216] syz_tun: left allmulticast mode [ 125.721472][ T6231] Zero length message leads to an empty skb [ 125.891335][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 126.137562][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 126.137592][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 126.217538][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 126.602851][ T6259] tipc: Enabled bearer , priority 0 [ 126.643729][ T6264] syzkaller0: entered promiscuous mode [ 126.643761][ T6264] syzkaller0: entered allmulticast mode [ 126.647778][ T6265] syz_tun: entered allmulticast mode [ 126.739033][ T6275] dvmrp1: entered allmulticast mode [ 126.824974][ T6254] tipc: Resetting bearer [ 126.950798][ T6258] syz_tun: left allmulticast mode [ 126.993093][ T6253] tipc: Resetting bearer [ 127.108733][ T6286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'. [ 127.153248][ T6253] tipc: Disabling bearer [ 127.286426][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 127.312742][ T6283] tipc: Enabled bearer , priority 0 [ 127.343286][ T6289] tipc: Resetting bearer [ 127.646072][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 127.647926][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 127.732856][ T6280] tipc: Disabling bearer [ 127.786723][ T6314] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 128.230122][ T6338] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 128.356821][ T6325] wlan1 speed is unknown, defaulting to 1000 [ 128.376892][ T6325] wlan1 speed is unknown, defaulting to 1000 [ 128.401745][ T6325] wlan1 speed is unknown, defaulting to 1000 [ 128.783950][ T6357] bond_slave_0: entered promiscuous mode [ 128.784010][ T6357] bond_slave_1: entered promiscuous mode [ 128.790045][ T6357] vlan2: entered promiscuous mode [ 128.790068][ T6357] bond0: entered promiscuous mode [ 129.238777][ T6361] tipc: Started in network mode [ 129.238810][ T6361] tipc: Node identity f2db8161fa57, cluster identity 4711 [ 129.239024][ T6361] tipc: Enabled bearer , priority 0 [ 129.335895][ T6361] tipc: Resetting bearer [ 129.364129][ T6325] infiniband syz2: set down [ 129.364153][ T6325] infiniband syz2: added wlan1 [ 129.368014][ T6325] syz2: rxe_create_cq: returned err = -12 [ 129.368209][ T6325] infiniband syz2: Couldn't create ib_mad CQ [ 129.368429][ T6325] infiniband syz2: Couldn't open port 1 [ 129.487847][ T6325] RDS/IB: syz2: added [ 129.488695][ T6325] smc: adding ib device syz2 with port count 1 [ 129.488982][ T6325] smc: ib device syz2 port 1 has no pnetid [ 129.562715][ T6360] tipc: Disabling bearer [ 129.675850][ T6379] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 129.677789][ T6378] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 129.734010][ T9] wlan1 speed is unknown, defaulting to 1000 [ 129.752226][ T6368] syzkaller1: entered promiscuous mode [ 129.752266][ T6368] syzkaller1: entered allmulticast mode [ 129.757208][ T2041] wlan1 speed is unknown, defaulting to 1000 [ 132.312052][ T6325] wlan1 speed is unknown, defaulting to 1000 [ 132.335792][ T6398] tipc: Enabled bearer , priority 0 [ 132.336324][ T6404] syzkaller0: entered promiscuous mode [ 132.336347][ T6404] syzkaller0: entered allmulticast mode [ 132.342309][ T6414] dummy0: entered allmulticast mode [ 132.369508][ T6406] tipc: Resetting bearer [ 132.632902][ T6392] tipc: Resetting bearer [ 132.757696][ T6392] tipc: Disabling bearer [ 132.872621][ T6414] dummy0: left allmulticast mode [ 132.872929][ T6325] wlan1 speed is unknown, defaulting to 1000 [ 133.462280][ T6446] tipc: Enabled bearer , priority 0 [ 133.464649][ T6446] syzkaller0: entered promiscuous mode [ 133.464674][ T6446] syzkaller0: entered allmulticast mode [ 133.612803][ T6451] tipc: Resetting bearer [ 133.652460][ T6445] tipc: Resetting bearer [ 133.833053][ T6445] tipc: Disabling bearer [ 133.972181][ T6325] wlan1 speed is unknown, defaulting to 1000 [ 135.008381][ T6325] wlan1 speed is unknown, defaulting to 1000 [ 135.175673][ T6484] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.627563][ T6325] wlan1 speed is unknown, defaulting to 1000 [ 136.068131][ T6496] syzkaller0: entered promiscuous mode [ 136.068161][ T6496] syzkaller0: entered allmulticast mode [ 136.666272][ T6512] syzkaller0: entered promiscuous mode [ 136.666303][ T6512] syzkaller0: entered allmulticast mode [ 137.050215][ T6536] syzkaller1: entered promiscuous mode [ 137.050236][ T6536] syzkaller1: entered allmulticast mode [ 138.562345][ T6572] tipc: Enabled bearer , priority 0 [ 138.563727][ T6573] syzkaller0: entered promiscuous mode [ 138.563752][ T6573] syzkaller0: entered allmulticast mode [ 138.569931][ T6586] tipc: Resetting bearer [ 138.580526][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.580620][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.669620][ T6569] tipc: Resetting bearer [ 138.843029][ T6569] tipc: Disabling bearer [ 139.836662][ T6625] wlan1 speed is unknown, defaulting to 1000 [ 140.141146][ T6629] __nla_validate_parse: 3 callbacks suppressed [ 140.141174][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 140.603498][ T6638] wlan1 speed is unknown, defaulting to 1000 [ 142.080675][ T6649] syzkaller0: entered promiscuous mode [ 142.080703][ T6649] syzkaller0: entered allmulticast mode [ 144.487887][ T6674] wlan1 speed is unknown, defaulting to 1000 [ 144.682526][ T6678] syzkaller0: entered promiscuous mode [ 144.683810][ T6678] syzkaller0: entered allmulticast mode [ 145.444346][ T6685] syzkaller0: entered promiscuous mode [ 145.444373][ T6685] syzkaller0: entered allmulticast mode [ 146.966601][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.247'. [ 147.034781][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 147.516160][ T6717] tipc: Enabled bearer , priority 0 [ 147.517064][ T6717] syzkaller0: entered promiscuous mode [ 147.517089][ T6717] syzkaller0: entered allmulticast mode [ 147.519272][ T6715] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 147.676475][ T6720] tipc: Resetting bearer [ 147.732249][ T6716] tipc: Resetting bearer [ 147.856987][ T6716] tipc: Disabling bearer [ 147.982753][ T6721] syzkaller0: entered promiscuous mode [ 147.982782][ T6721] syzkaller0: entered allmulticast mode [ 148.106023][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.106096][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.294443][ T6728] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.060831][ T6744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.126773][ T6744] bond0: (slave rose0): Enslaving as an active interface with an up link [ 149.316485][ T6751] netlink: 'syz.1.265': attribute type 13 has an invalid length. [ 149.419462][ T6592] Set syz1 is full, maxelem 65536 reached [ 149.843467][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.268'. [ 150.092611][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 150.309029][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.328163][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.985909][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.018280][ T6751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.095880][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.096138][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.096228][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.096267][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.688026][ T6805] netlink: 79 bytes leftover after parsing attributes in process `syz.2.278'. [ 153.505701][ T2041] IPVS: starting estimator thread 0... [ 153.592079][ T6829] IPVS: using max 7 ests per chain, 16800 per kthread [ 154.368115][ T6862] tipc: Started in network mode [ 154.368148][ T6862] tipc: Node identity fee5e037c56a, cluster identity 4711 [ 154.382516][ T6862] tipc: Enabled bearer , priority 0 [ 154.435394][ T6862] tipc: Resetting bearer [ 154.619384][ T6859] tipc: Disabling bearer [ 154.884908][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 154.943671][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 155.019892][ T6878] tipc: Enabled bearer , priority 0 [ 155.030383][ T6878] syzkaller0: entered promiscuous mode [ 155.030412][ T6878] syzkaller0: entered allmulticast mode [ 155.081539][ T6878] tipc: Resetting bearer [ 155.133376][ T6876] tipc: Resetting bearer [ 155.308438][ T6876] tipc: Disabling bearer [ 155.788968][ T31] IPVS: starting estimator thread 0... [ 155.942003][ T6897] IPVS: using max 7 ests per chain, 16800 per kthread [ 156.175656][ T6905] tipc: Enabled bearer , priority 0 [ 156.405694][ T6910] tipc: Resetting bearer [ 156.649790][ T6902] tipc: Disabling bearer [ 156.746277][ T6922] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 156.967230][ T6928] tipc: Enabled bearer , priority 0 [ 156.987037][ T6929] syzkaller0: entered promiscuous mode [ 156.987071][ T6929] syzkaller0: entered allmulticast mode [ 157.013584][ T6924] tipc: Resetting bearer [ 157.052269][ T6923] tipc: Resetting bearer [ 157.214060][ T6923] tipc: Disabling bearer [ 157.852831][ T6952] syzkaller0: entered promiscuous mode [ 157.852862][ T6952] syzkaller0: entered allmulticast mode [ 159.786819][ T6975] syzkaller1: entered promiscuous mode [ 159.790532][ T6975] syzkaller1: entered allmulticast mode [ 159.794780][ T6986] tipc: Enabled bearer , priority 0 [ 160.086841][ T6986] tipc: Resetting bearer [ 160.087254][ T6991] syzkaller0: entered promiscuous mode [ 160.087278][ T6991] syzkaller0: entered allmulticast mode [ 160.123194][ T6981] tipc: Resetting bearer [ 160.262819][ T6981] tipc: Disabling bearer [ 160.762896][ T7011] syzkaller0: entered promiscuous mode [ 160.762925][ T7011] syzkaller0: entered allmulticast mode [ 161.126187][ T7024] netlink: 36 bytes leftover after parsing attributes in process `syz.4.349'. [ 162.709994][ T7026] tipc: Enabled bearer , priority 0 [ 162.722553][ T7034] syzkaller1: entered promiscuous mode [ 162.722582][ T7034] syzkaller1: entered allmulticast mode [ 162.728234][ T7039] tipc: Resetting bearer [ 162.814370][ T7022] tipc: Disabling bearer [ 163.247367][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.354'. [ 163.344147][ T7046] wlan1 speed is unknown, defaulting to 1000 [ 164.235054][ T7073] rdma_rxe: rxe_newlink: failed to add wlan1 [ 165.128954][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 165.128990][ T7096] netlink: 'syz.1.369': attribute type 5 has an invalid length. [ 165.129006][ T7096] netlink: 'syz.1.369': attribute type 8 has an invalid length. [ 165.129019][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 165.166552][ T7093] syzkaller1: entered promiscuous mode [ 165.166574][ T7093] syzkaller1: entered allmulticast mode [ 165.169025][ T7103] netlink: 48 bytes leftover after parsing attributes in process `syz.2.371'. [ 165.226733][ T7096] geneve0: entered promiscuous mode [ 165.226763][ T7096] geneve0: entered allmulticast mode [ 165.503779][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 165.521488][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 165.592172][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 165.595712][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 165.652415][ T7114] syzkaller0: entered promiscuous mode [ 165.652452][ T7114] syzkaller0: entered allmulticast mode [ 165.840693][ T7123] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 166.323928][ T7140] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 166.551563][ T7153] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 166.672456][ T7152] tipc: Enabling of bearer rejected, failed to enable media [ 166.726368][ T7155] rdma_rxe: rxe_newlink: failed to add wlan1 [ 167.226667][ T7186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.391'. [ 167.677366][ T7194] wlan1 speed is unknown, defaulting to 1000 [ 167.771555][ T7201] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 167.852902][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 168.012310][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.402'. [ 168.086760][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 168.092227][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.403'. [ 168.635862][ T7227] syzkaller1: entered promiscuous mode [ 168.635892][ T7227] syzkaller1: entered allmulticast mode [ 169.285858][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'. [ 169.323035][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.415'. [ 169.351589][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 169.869007][ T7267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.421'. [ 169.879915][ T7266] syzkaller1: entered promiscuous mode [ 169.879947][ T7266] syzkaller1: entered allmulticast mode [ 170.703869][ T7294] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 171.509648][ T7308] Bluetooth: hci0: unsupported parameter 65535 [ 171.509671][ T7308] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 171.609330][ T7316] __nla_validate_parse: 2 callbacks suppressed [ 171.609350][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 171.747267][ T7322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.445'. [ 171.749024][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 171.945951][ T7330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.450'. [ 172.250805][ T7341] Bluetooth: hci0: unsupported parameter 65535 [ 172.250886][ T7341] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 172.260873][ T7343] tipc: Enabling of bearer rejected, failed to enable media [ 172.891748][ T7358] wlan1 speed is unknown, defaulting to 1000 [ 173.399541][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.461'. [ 173.401253][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 173.679588][ T7354] lec:lec_atm_close: lec0: Shut down! [ 173.720736][ T7375] tipc: Enabled bearer , priority 0 [ 173.721691][ T7375] syzkaller0: entered promiscuous mode [ 173.721714][ T7375] syzkaller0: entered allmulticast mode [ 173.775389][ T7375] tipc: Resetting bearer [ 173.802359][ T7374] tipc: Resetting bearer [ 173.859077][ T7385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.466'. [ 173.933156][ T7374] tipc: Disabling bearer [ 173.942105][ T7388] rdma_rxe: rxe_newlink: failed to add wlan1 [ 174.241719][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.253512][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.312991][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 174.380785][ T7389] syz.0.466 (7389) used greatest stack depth: 17904 bytes left [ 174.457085][ T7399] Bluetooth: hci0: unsupported parameter 65535 [ 174.457117][ T7399] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 175.792093][ T7436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.483'. [ 175.793606][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 176.574243][ T7463] tipc: Enabled bearer , priority 0 [ 176.575082][ T7463] syzkaller0: entered promiscuous mode [ 176.575106][ T7463] syzkaller0: entered allmulticast mode [ 176.756295][ T7470] __nla_validate_parse: 1 callbacks suppressed [ 176.756316][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 176.756346][ T7470] netlink: 'syz.4.496': attribute type 5 has an invalid length. [ 176.756362][ T7470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.496'. [ 177.423451][ T7470] geneve2: entered promiscuous mode [ 177.423479][ T7470] geneve2: entered allmulticast mode [ 177.456861][ T7461] tipc: Resetting bearer [ 177.594525][ T9] tipc: Node number set to 143425889 [ 177.664594][ T7461] tipc: Disabling bearer [ 177.832291][ T6116] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 177.832637][ T6116] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 177.832678][ T6116] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 177.832716][ T6116] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 177.925470][ T7492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.507'. [ 178.546086][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 178.546122][ T7506] netlink: 'syz.4.511': attribute type 5 has an invalid length. [ 178.546148][ T7506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.511'. [ 178.770804][ T7508] wlan1 speed is unknown, defaulting to 1000 [ 179.675010][ T7524] tipc: Enabled bearer , priority 0 [ 179.693798][ T7524] syzkaller0: entered promiscuous mode [ 179.693825][ T7524] syzkaller0: entered allmulticast mode [ 179.774196][ T7524] tipc: Resetting bearer [ 179.853902][ T7523] tipc: Resetting bearer [ 180.037044][ T7523] tipc: Disabling bearer [ 180.464658][ T7532] tipc: Enabling of bearer rejected, failed to enable media [ 180.694706][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 180.884231][ T7565] syzkaller0: entered promiscuous mode [ 180.884259][ T7565] syzkaller0: entered allmulticast mode [ 181.711716][ T7562] lec:lec_atm_close: lec0: Shut down! [ 181.772478][ T7569] wlan1 speed is unknown, defaulting to 1000 [ 181.797484][ T7595] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 182.061730][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 182.397746][ T7606] tipc: Enabling of bearer rejected, failed to enable media [ 182.788108][ T7621] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 182.821090][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 183.010906][ T7626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.541'. [ 183.012966][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 183.431255][ T7636] syzkaller0: entered promiscuous mode [ 183.431284][ T7636] syzkaller0: entered allmulticast mode [ 183.535207][ T7646] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 183.798041][ T7651] sctp: [Deprecated]: syz.1.550 (pid 7651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.798041][ T7651] Use struct sctp_sack_info instead [ 183.822818][ T7651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.550'. [ 184.209307][ T7655] tipc: Enabled bearer , priority 0 [ 184.210865][ T7658] syzkaller0: entered promiscuous mode [ 184.210890][ T7658] syzkaller0: entered allmulticast mode [ 184.262243][ T7648] tipc: Resetting bearer [ 184.479104][ T7648] tipc: Disabling bearer [ 184.486503][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 184.538267][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 184.610991][ T7684] netlink: 68 bytes leftover after parsing attributes in process `syz.2.558'. [ 184.885128][ T7695] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 185.536451][ T7712] tipc: Enabled bearer , priority 0 [ 185.569004][ T7711] tipc: Resetting bearer [ 185.683547][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.569'. [ 185.694418][ T7710] tipc: Disabling bearer [ 185.850341][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 185.886403][ T7723] tipc: Enabled bearer , priority 0 [ 185.887271][ T7723] syzkaller0: entered promiscuous mode [ 185.887295][ T7723] syzkaller0: entered allmulticast mode [ 186.068692][ T7722] tipc: Resetting bearer [ 186.146580][ T7741] netlink: 'syz.4.577': attribute type 64 has an invalid length. [ 186.224413][ T7722] tipc: Disabling bearer [ 186.389765][ T7744] tipc: Enabling of bearer rejected, failed to enable media [ 187.007425][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.009203][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.011610][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.011657][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.309276][ T7783] tipc: Enabled bearer , priority 0 [ 187.314153][ T7786] __nla_validate_parse: 6 callbacks suppressed [ 187.314174][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 187.343972][ T7783] tipc: Resetting bearer [ 187.654198][ T7782] tipc: Disabling bearer [ 187.975009][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 187.992772][ T7801] netlink: 68 bytes leftover after parsing attributes in process `syz.1.594'. [ 188.182569][ T7771] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.182606][ T7771] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 188.320106][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 188.320146][ T7810] netlink: 'syz.3.598': attribute type 5 has an invalid length. [ 188.320174][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.598'. [ 188.375972][ T7810] geneve2: entered promiscuous mode [ 188.376001][ T7810] geneve2: entered allmulticast mode [ 188.379388][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 188.380127][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 188.380172][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 188.380212][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 188.659310][ T7771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.659340][ T7771] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 188.835791][ T7771] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.835815][ T7771] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 188.849358][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'. [ 188.998708][ T7771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.998735][ T7771] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 189.097282][ T7836] netlink: 'syz.0.603': attribute type 3 has an invalid length. [ 189.173786][ T7771] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.173813][ T7771] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 189.504629][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 189.526783][ T7857] syzkaller0: entered promiscuous mode [ 189.526811][ T7857] syzkaller0: entered allmulticast mode [ 190.026845][ T5887] wlan1 speed is unknown, defaulting to 1000 [ 190.954010][ T7771] ------------[ cut here ]------------ [ 190.954026][ T7771] rtmutex deadlock detected [ 190.954176][ T7771] WARNING: CPU: 1 PID: 7771 at kernel/locking/rtmutex.c:1674 rt_mutex_handle_deadlock+0x28/0xb0 [ 190.954231][ T7771] Modules linked in: [ 190.954270][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.2.584 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.954299][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.954318][ T7771] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 190.954350][ T7771] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 a6 3c 01 00 90 48 c7 c7 e0 18 eb 8a e8 b9 bf ba f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 70 c5 91 4c 8d [ 190.954369][ T7771] RSP: 0018:ffffc9001d3df950 EFLAGS: 00010246 [ 190.954389][ T7771] RAX: 1e1ab0679a716600 RBX: ffffc9001d3df9e0 RCX: 0000000000080000 [ 190.954406][ T7771] RDX: ffffc9000dab9000 RSI: 0000000000056ca1 RDI: 0000000000056ca2 [ 190.954422][ T7771] RBP: ffffc9001d3dfb00 R08: 0000000000000000 R09: 0000000000000000 [ 190.954436][ T7771] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92003a7bf38 [ 190.954452][ T7771] R13: ffffffff8ac870a9 R14: ffff88802721c098 R15: dffffc0000000000 [ 190.954467][ T7771] FS: 00007fe786cae6c0(0000) GS:ffff888126cc9000(0000) knlGS:0000000000000000 [ 190.954486][ T7771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.954501][ T7771] CR2: 00007ffecf7d8028 CR3: 000000001e7dc000 CR4: 00000000003526f0 [ 190.954521][ T7771] Call Trace: [ 190.954538][ T7771] [ 190.954551][ T7771] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 190.954580][ T7771] rt_mutex_slowlock+0x692/0x6e0 [ 190.954611][ T7771] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 190.954642][ T7771] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 190.954670][ T7771] ? __lock_acquire+0xab9/0xd20 [ 190.954709][ T7771] ? nfc_rfkill_set_block+0x50/0x2e0 [ 190.954741][ T7771] ? rt_mutex_slowunlock+0x493/0x8a0 [ 190.954790][ T7771] ? nfc_rfkill_set_block+0x50/0x2e0 [ 190.954815][ T7771] mutex_lock_nested+0x16a/0x1d0 [ 190.954847][ T7771] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 190.954875][ T7771] nfc_rfkill_set_block+0x50/0x2e0 [ 190.954902][ T7771] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 190.954931][ T7771] rfkill_set_block+0x1e5/0x450 [ 190.954972][ T7771] rfkill_fop_write+0x44e/0x580 [ 190.955001][ T7771] ? __pfx_rfkill_fop_write+0x10/0x10 [ 190.955028][ T7771] ? rw_verify_area+0x25b/0x4e0 [ 190.955062][ T7771] ? __lock_acquire+0xab9/0xd20 [ 190.955083][ T7771] ? __pfx_rfkill_fop_write+0x10/0x10 [ 190.955121][ T7771] vfs_write+0x287/0xb40 [ 190.955167][ T7771] ? __pfx_vfs_write+0x10/0x10 [ 190.955204][ T7771] ? __fget_files+0x2a/0x420 [ 190.955231][ T7771] ? __fget_files+0x2a/0x420 [ 190.955254][ T7771] ? __fget_files+0x3a6/0x420 [ 190.955275][ T7771] ? __fget_files+0x2a/0x420 [ 190.955318][ T7771] ksys_write+0x14b/0x260 [ 190.955356][ T7771] ? __pfx_ksys_write+0x10/0x10 [ 190.955395][ T7771] ? do_syscall_64+0xbe/0xfa0 [ 190.955435][ T7771] do_syscall_64+0xfa/0xfa0 [ 190.955469][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.955502][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.955524][ T7771] ? clear_bhb_loop+0x60/0xb0 [ 190.955552][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.955573][ T7771] RIP: 0033:0x7fe788a4eec9 [ 190.955603][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.955621][ T7771] RSP: 002b:00007fe786cae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.955644][ T7771] RAX: ffffffffffffffda RBX: 00007fe788ca5fa0 RCX: 00007fe788a4eec9 [ 190.955660][ T7771] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005 [ 190.955674][ T7771] RBP: 00007fe788ad1f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.955687][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.955699][ T7771] R13: 00007fe788ca6038 R14: 00007fe788ca5fa0 R15: 00007ffdfec80be8 [ 190.955738][ T7771] [ 190.955756][ T7771] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 190.955774][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.2.584 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.955797][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.955810][ T7771] Call Trace: [ 190.955820][ T7771] [ 190.955828][ T7771] dump_stack_lvl+0x99/0x250 [ 190.955857][ T7771] ? __asan_memcpy+0x40/0x70 [ 190.955890][ T7771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.955917][ T7771] ? __pfx__printk+0x10/0x10 [ 190.955960][ T7771] vpanic+0x237/0x6d0 [ 190.955982][ T7771] ? __pfx_vpanic+0x10/0x10 [ 190.956014][ T7771] panic+0xb9/0xc0 [ 190.956034][ T7771] ? __pfx_panic+0x10/0x10 [ 190.956074][ T7771] __warn+0x31b/0x4b0 [ 190.956094][ T7771] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 190.956149][ T7771] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 190.956185][ T7771] report_bug+0x2be/0x4f0 [ 190.956219][ T7771] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 190.956250][ T7771] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 190.956278][ T7771] ? rt_mutex_handle_deadlock+0x2a/0xb0 [ 190.956307][ T7771] handle_bug+0x84/0x160 [ 190.956332][ T7771] exc_invalid_op+0x1a/0x50 [ 190.956355][ T7771] asm_exc_invalid_op+0x1a/0x20 [ 190.956377][ T7771] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 190.956417][ T7771] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 a6 3c 01 00 90 48 c7 c7 e0 18 eb 8a e8 b9 bf ba f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 70 c5 91 4c 8d [ 190.956435][ T7771] RSP: 0018:ffffc9001d3df950 EFLAGS: 00010246 [ 190.956454][ T7771] RAX: 1e1ab0679a716600 RBX: ffffc9001d3df9e0 RCX: 0000000000080000 [ 190.956470][ T7771] RDX: ffffc9000dab9000 RSI: 0000000000056ca1 RDI: 0000000000056ca2 [ 190.956484][ T7771] RBP: ffffc9001d3dfb00 R08: 0000000000000000 R09: 0000000000000000 [ 190.956498][ T7771] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92003a7bf38 [ 190.956514][ T7771] R13: ffffffff8ac870a9 R14: ffff88802721c098 R15: dffffc0000000000 [ 190.956533][ T7771] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 190.956579][ T7771] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 190.956608][ T7771] rt_mutex_slowlock+0x692/0x6e0 [ 190.956638][ T7771] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 190.956668][ T7771] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 190.956694][ T7771] ? __lock_acquire+0xab9/0xd20 [ 190.956729][ T7771] ? nfc_rfkill_set_block+0x50/0x2e0 [ 190.956759][ T7771] ? rt_mutex_slowunlock+0x493/0x8a0 [ 190.956798][ T7771] ? nfc_rfkill_set_block+0x50/0x2e0 [ 190.956821][ T7771] mutex_lock_nested+0x16a/0x1d0 [ 190.956851][ T7771] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 190.956877][ T7771] nfc_rfkill_set_block+0x50/0x2e0 [ 190.956902][ T7771] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 190.956929][ T7771] rfkill_set_block+0x1e5/0x450 [ 190.956969][ T7771] rfkill_fop_write+0x44e/0x580 [ 190.956997][ T7771] ? __pfx_rfkill_fop_write+0x10/0x10 [ 190.957025][ T7771] ? rw_verify_area+0x25b/0x4e0 [ 190.957059][ T7771] ? __lock_acquire+0xab9/0xd20 [ 190.957080][ T7771] ? __pfx_rfkill_fop_write+0x10/0x10 [ 190.957117][ T7771] vfs_write+0x287/0xb40 [ 190.957163][ T7771] ? __pfx_vfs_write+0x10/0x10 [ 190.957200][ T7771] ? __fget_files+0x2a/0x420 [ 190.957230][ T7771] ? __fget_files+0x2a/0x420 [ 190.957254][ T7771] ? __fget_files+0x3a6/0x420 [ 190.957277][ T7771] ? __fget_files+0x2a/0x420 [ 190.957312][ T7771] ksys_write+0x14b/0x260 [ 190.957363][ T7771] ? __pfx_ksys_write+0x10/0x10 [ 190.957403][ T7771] ? do_syscall_64+0xbe/0xfa0 [ 190.957441][ T7771] do_syscall_64+0xfa/0xfa0 [ 190.957472][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.957504][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.957526][ T7771] ? clear_bhb_loop+0x60/0xb0 [ 190.957572][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.957593][ T7771] RIP: 0033:0x7fe788a4eec9 [ 190.957613][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.957630][ T7771] RSP: 002b:00007fe786cae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.957652][ T7771] RAX: ffffffffffffffda RBX: 00007fe788ca5fa0 RCX: 00007fe788a4eec9 [ 190.957667][ T7771] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005 [ 190.957681][ T7771] RBP: 00007fe788ad1f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.957694][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.957707][ T7771] R13: 00007fe788ca6038 R14: 00007fe788ca5fa0 R15: 00007ffdfec80be8 [ 190.957742][ T7771] [ 190.958055][ T7771] Kernel Offset: disabled