last executing test programs: 5.097572963s ago: executing program 1 (id=1175): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r0, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000230048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb00000000000000599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c50500721fc7aa2a583726c64c0fb6ca996d278fb00bba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f54d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8989d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501ae03002af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a86ad4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909eb08cca312c557bff04cf1fbb0dcfe8ac00"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 4.995705347s ago: executing program 1 (id=1177): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000200)={0xffffffffffffffff, 0x200, "00fa00"}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80, 0xc0000) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)=0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) 1.906459749s ago: executing program 4 (id=1224): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0100001600010f0000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x10c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000300)=@rose={'rose', 0x0}, 0x10) 1.724059208s ago: executing program 4 (id=1226): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.597310861s ago: executing program 0 (id=1227): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x6c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x4, 0x1, 0x5, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local]}, @dstopts={0x89}, @routing={0xc, 0x4, 0x2, 0x1, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_USERDATA={0x5d, 0x7, 0x1, 0x0, "aeea39170943d5294a5bacbb749a286af42e6ac58d90742b7b544709d44a85064afd0dddfadbbe06aedcd7b94a44cab40fef88875106eb91f711790c517cb0c4f234aabc4c4e76fc1ba7fa4498e0160413a4a184836446baa5"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x20044091) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7625fd53, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x2400804c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000580)=@raw=[@ringbuf_query, @generic={0x4, 0xb, 0x1, 0x0, 0x2}], &(0x7f00000005c0)='GPL\x00', 0x800, 0xaf, &(0x7f0000000600)=""/175, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x1, 0xa, 0x7dfcc856, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x2, 0x1, 0x6, 0x7}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x23, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x13, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x6, 0xc2, &(0x7f0000000440)=""/194, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x9, 0xd, 0x2}, 0x10, 0xffffffffffffffff, r9, 0x2, 0x0, &(0x7f0000000840)=[{0x5, 0x3, 0xa, 0xa}, {0x1, 0x2, 0x8, 0xa}], 0x10, 0x4}, 0x94) 1.517346173s ago: executing program 4 (id=1228): syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f3680900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be08"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9dc6b014b6d17f480a8808e33da40beb39e0cf51d0715edabfdba23df997163d247d198395f46484b7e9dd70ddbdf1edcd993a06f11ffbcebf45a2bc17faeb75fdecac952059493f1ea9ca5fdb77c1948a70db77be86181d970d164bbff42f33271ad89db70d1ae2200a4943fa684564ab27a0dbc03d303c9062e48b558107635fce8b036c72c6"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 1.367991211s ago: executing program 0 (id=1229): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}}, 0x0) 1.366545114s ago: executing program 4 (id=1231): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000100000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 1.204975121s ago: executing program 0 (id=1233): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) bind$netlink(r1, 0x0, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) connect$rxrpc(r2, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x40400c0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001700)={@in6={{0xa, 0x4e24, 0xb, @mcast1, 0x81}}, 0x0, 0x0, 0x3f, 0x0, "f1990e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae3d393dd38ea6c02965c6776267517308a3d40aa1c788df600"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000001400)=[{&(0x7f00000004c0)="e41cdbf161be3e2ef03b5091e7c02394c1b045ecf6e191834738f71ecff73aaf2a6ca218674d52892bca1c76c3374978bee4ee976f24220eb138a0157f14f31183f233142c9188df", 0x48}, {&(0x7f0000000640)="3d56086e2648463ba46b682391850fd76edf9300a5b8bccf8e1e90e81c79a5cda75f40112b950e3325675abe32396907673bfab35f1b000186c48c18f2719972b561c5660d02472124c5422d7f18d380713988ddf9aceae218d79bc54c56e934af10202f5f28b559d5a8c113d9cfd52a6940eb609370a4c6080d538b4a00a549a5e2b1050dd6c6312cefed57bdc5199cf19716fdcced4d9adb7b423643f83fdce763245bfe358ee62712802225bc9d93d16711a5293d19fd5070fe76f0320caf57fdf1b0c8b7018146b9bbcd", 0xcc}, {&(0x7f0000000780)="4b97f8be3e319c7692ceeeeb0fc665c1bfe72483a1b330edbc0efcea1c0f1fdfc555dd99a72a684c6546bd31536d0f6be4e7671f93f6bfa53fe2908876465e572a62493f9a96460d373db0f18308ff9781e5cdb4e65fd84a4846d7499ac57fb6394d7c3b315b7f2ec29412d0fb30fb60ea649db212700f223662bd9c7dfbd5b78d5ecc34a99c728072ada8b688a83f38ae4a34a40d360d5bf9dbae42d07595bdaf0f89247e1062d30ddebc047d5bd16d8287a5e10069c380160210", 0xbb}, {&(0x7f0000001800)="c6c4dd44da9f6061a68271a90443b0b65b9f254228815e0b4899f22065ab2bebf294b4125f55016f159843ab9e1d480108553e785f260abb37ffd12f03e1bf36792ac35df1355b93b821d4a29cdf851569ebb691346c0324d2dbb8ea4a57c3b54ad2b3cde6bf4253a58bc7506a680056dca9a240b3200f9ac27e0cc1536423f98382e868a8de6878129b96a0a1cfb76681afe912226cd35c468bf92d1f4175ca40f7b550dd076410cb7a63af942ad2c6909b2cfd85c5b4ef3f6dc632b835dfad689c76697890c49562433763f4457c2fbaa2f5e4673a5bf1e2ad24dd15cb480d", 0xe0}, {&(0x7f0000001600)="8ede3549c5f3dde9186b965f491b62640f4f9a50131e96f875387b36b6c5d8d5bd8259401b69c507db8f29d6a07938793e0941ad63a8c8a736ec31c3c989dc105ecb057b0af62ab2cabb2bf781d42744c4328eb429256f6eec6db2f717d632bf7f63c0ba7b5ffd07de828f2bc0dbc2d0a50ff743315aea4dc390f39c4b2f05dd4ea73238f0726db6342c819bbcf526ba16f141bd78e18bb2d9d08c8dbcf46f7a0a5259494cb3bf", 0xa7}, {&(0x7f0000001140)="ca55560633d9e55959a61f7a94e1505c6ed53e22cd46e1d0609e70d3d95ae8192f08db8b00dedad47eba95fe87895f9ab139f1a656f009962cef1c3ca5b483630ca2ef184d83de890b86833aa125c7eb6a8cda87e5043e2401d0a1ff1aebd4cf98d347a539fb7442c49421103b23c161065cde0055afe04a80f5cf42e12a0b4634ab3217af3d726f94c9503ea027c4780c24ac5707974573b2dd20e31b754fed74da020238274503d83c8865f006600d8ba08c3e8436cde9b19f16fd324d2bf0", 0xc0}, {&(0x7f0000001200)="8558ba6560642a7efb760017c3b06ff184b806aa456f58eab3cb93510741a9f8ea544805d0053d808a658d1ce0586d8d50a939196bf2b1d311253751f6188e951232e8da305d14814b84eed25e7f00ce81c990cb1bb4ed5f404e377d2fe1833f2ad85e7a4dd485704b8cc3a53fdce552ae3ecdc59a17d26020c5d8f3c89a07169a4896a429a5c6b19b496707e88705257100b52cbcf184991fd142c696a3d10e8a70f726abf85e172df9480b164463", 0xaf}], 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffe83) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000003580)=[{{&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}], 0x1, 0x40040c1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x5, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@map=r5, r6, 0x34, 0x20, 0x0, @void, @void, @void, @value=r8}, 0x20) r9 = epoll_create1(0x80000) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000001c0)={0x2, 0x1, 0x2, 0x0, 0x0, [{{r3}, 0x3ff}, {{r9}, 0x65d03a59}]}) 1.120055997s ago: executing program 3 (id=1234): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = accept$packet(r1, 0x0, &(0x7f0000000180)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYBLOB="79559cd4e8db3d7b61a6d8efd29800"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)='\x00', 0x1}}, 0x40805) ioctl$sock_inet_tcp_SIOCATMARK(r10, 0x8905, &(0x7f0000000280)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) 1.010299864s ago: executing program 2 (id=1236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 903.952062ms ago: executing program 0 (id=1237): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 902.458643ms ago: executing program 2 (id=1238): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r4, 0x5}, 0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000140)=0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000100)) 901.954218ms ago: executing program 4 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000004000000040000000b000000000000002d8ee4f02cde437b6bafb8525df96ced24a3ea8d9ec5679b3ca127c2da45d978b52e0d682361b48a0ffaca1337006d6919bfef42380c46ecca20286fd626391e5f8d42bf11d4d14fb97a6ee1b3d524b0003065297985acb491489741827b5ff07864727d8d0e4ce63872e00311a2cf3fedb25bef74edc36f312e46895295438238c52ceea200e955e8bb", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7176}, &(0x7f0000000180)=0x8) 852.078683ms ago: executing program 3 (id=1240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000080)=""/140, &(0x7f0000000140)=0x8c) 833.292942ms ago: executing program 4 (id=1241): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x25}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004740)=""/4080, 0xff0}, {&(0x7f0000000700)=""/99, 0x63}, {&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000000000)=""/154, 0x9a}], 0x5}, 0x8}], 0x3, 0x2, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="f9c5a167cb38dda420ea5c8df4a8cd54ee6a15dd703866bdf6941944c13871e24bf76ab70541cf1ba39fabff51d3066b24dd3d3e542ab2bfb5d149cc2e75a50b", 0x40}], 0x1}, 0x8001) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 695.991198ms ago: executing program 0 (id=1242): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8cc}, @IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 601.481963ms ago: executing program 3 (id=1243): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) sendfile(r1, r1, 0x0, 0x6) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000040)="78000000180025ffff0b7a0204be040274d16f0714056406040c5c0009003f0006180a020011ace391e05467c27bf3000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89c30977b6ec0cff3959547f509058ba86c902007a00004a3200043a793bab259f00160008030a000000000006000000d1ddf66ed538f2", 0x86, 0xcd8f1e43828b5fe5, 0x0, 0x0) 574.889932ms ago: executing program 2 (id=1244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 528.01017ms ago: executing program 0 (id=1245): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x3}, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xfffc, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, 0x0) 355.247905ms ago: executing program 3 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x0, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x92f7, 0x6, 0x5, 0x7}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$tipc(r2, &(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x71829370d57ad6b7}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@deltaction={0x1c0, 0x31, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc3e6}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) bind$netlink(r3, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfd}, 0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0x3, 0x1, [0x6]}, &(0x7f00000004c0)=0xa) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500)={r4, 0x52, "278eb346fdba6e7dc4eb5c0f0e4291746d3a69456d3dd5948b5fcc780ba51a3e0501a2bf55aa572afed6f205cb9d0f86ee2ac4dc201c45c0324efca530700c6877fcf07fe0e6ab1e2bfbbb31d0234c5b26ff"}, &(0x7f0000000580)=0x5a) (async) socketpair(0x1, 0x1, 0x3, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x2, 0x3, 0x605, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x48041}, 0x200080c0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r7) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1c8, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x22, 0xa8, @random="d581123e8b7336b59fa6a3816bfa41de88e9a8ab88c68df1aab4f6d25004"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc8, 0xa8, @random="064b3c0e9f5c2e1724c65151a9893c755c474c01919aa861f7da4df082bfb2159fe8f179b086ac8407d5aa6698ae7b8e2f804693c35d2e4c28dd1f3d08db7ef086cb3c065df27a326906b9c0f2bd1f4f77387246890b5f55544dc238e572a869c64178baebea164481bb7dd2fadda69fd0d731b542828d105d85158677a1fcdd1e85f5225c3d99a100982eb1f527670fa385e45e5d0e82a697a307fc58aafea4a0327d4c9470d592db0ff860a9139c3cea4e6b61f95a532df73df956d880458cbda4aaad"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa0, 0xa8, @random="768ef0f757b132c85ba7919b4a8ed2136e8e42999d1b031031f8aeddd8757a582098b78331bc0b33590c050fd49388f42485a317294db2ea00b8f78847be3e33166115fded4f6617b41a44776c1c256810a753e16774333a51cd2ea92e4f229e29119e057247eee496a9209314fc03c629467f5999b92a3c7764e6aa897227d9e09d1cb465cb3a3622fda508c756c35d74ed972c613db6fdbdedda97"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000}, 0x20044050) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%-010d \x00'}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40), 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0xc, '\x00', r10, r11, 0x2, 0x4, 0x5}, 0x50) getsockopt(r7, 0x8, 0x10001, &(0x7f0000000c00), &(0x7f0000000c40)) (async) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000c80)=0x400000) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000cc0)={r5, 0x15, "06fe290d89a989b78e57963b8e0c4ca783555a3732"}, &(0x7f0000000d00)=0x1d) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000d40)={0x4, 0x208, 0x6, 0xfb6b, r13}, 0x10) (async) shutdown(r0, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000d80)={0x1, 'wg2\x00', 0x3}, 0x18) (async) setsockopt$inet_int(r6, 0x0, 0x1, &(0x7f0000000dc0)=0x80, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000e00)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x7fff, 0xd0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}], 0x88) r14 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000ec0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000f00), 0x12) 354.74452ms ago: executing program 3 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, [], "8029335287b7a081"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000), 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x200, 0x0, r6, 0x80000001, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000020c00000094ffdfffffffffea4983baba90a6a99809004d86a1729eada54aaa5406914f834e0c5d4890e72800000000000000000000000001bacc"], &(0x7f0000000040)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x8168}, [@IFLA_VFINFO_LIST={0xffffffffffffff9c, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) ioctl$PPPIOCSNPMODE(r10, 0x4008744b, &(0x7f0000000080)={0xfd, 0x2}) 353.996907ms ago: executing program 2 (id=1248): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x53, "bb2e6fcac191fc89b29faadabaceddc9bdbcb842b1e6a99fe375d9eb0e90877e7973f7ac7011cdf49f68d908c32c2575f9c24ea1edc239f15babd3ffb7c21f5c7905931d7dbb066ef1418a42c4f14012ed2390"}, &(0x7f0000000340)=0x5b) (rerun: 32) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000000380)={r11, 0x3ff, 0x8, [0x7, 0x9, 0xce, 0x7fd4, 0x9, 0x0, 0x4, 0x0]}, &(0x7f00000003c0)=0x18) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}}}, 0x24}}, 0x800) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 353.277428ms ago: executing program 1 (id=1249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x6c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x43, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_b, @from_mac, {0x1, 0xb1b}}, 0x5, @random=0x8000, 0x8000, @void, @val, @val={0x3, 0x1, 0xab}, @val={0x4, 0x6, {0x7, 0x9, 0x1, 0x3}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0x2, 0x3d, 0xff}}, @val={0x25, 0x3, {0x0, 0x24, 0x7}}, @void, @void, @void, @void, @void, @void}}]}, 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r5) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c004}, 0x44815) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x28, r1, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8d8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 222.329124ms ago: executing program 1 (id=1250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@multicast2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}]}]}, 0xec}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c00028008000340000000160800014000"], 0x110}}, 0x40040) 210.530872ms ago: executing program 2 (id=1251): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5128}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5128}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0) (async) 160.071471ms ago: executing program 3 (id=1252): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x101}, &(0x7f0000001200)=0x10) unshare(0x6a040000) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'dh\x00', 0x3, 0x4, 0x64}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x8, 0x1, 0x8000000) setsockopt(r3, 0x9, 0x970, &(0x7f0000000300)="277ee0995f47da49bada0a141614c638aa2f07050bf264054d716cbedeffad4d6cb6cd7662d6dc315ee6bef28d3fded7e658eac6f49e87050b3b5620f6f783bead0ca6237d892049b046b15c1ee3c896dc4ce2024a015ebd2d8517c178a63f64d4eaf914bb2a5ad13e544b993d65dc89fe0bc6b8386b03513691368c83048e43376448013496ea", 0x87) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x618e, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="00bf4300000000001c0012000000"], 0x3c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 117.486675ms ago: executing program 1 (id=1253): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 3.268065ms ago: executing program 1 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6f390000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0x28, 0x50, &(0x7f0000000540)="cdafd700f8763a01b6c8f40028e7e3768fd5168e9f3471706dcb163692730e137c683c0a79db5832", &(0x7f0000000580)=""/80, 0x9, 0x0, 0xc1, 0xc8, &(0x7f0000000600)="c8b1842c60171e7a7a4b14a014160452deb6f2c028ee0c0386cc81c1761b8d60eb31649f7f992c4d914b551df7df6919a8679e259cfb05d504bd7548b91cbc8bf5e11922660b13f7a6aea3f9352b6650852499e126e7b7ad51c22d8ffe2d3d4bd83069b5671cfe9f8d37b974ddba9dc4c2d30180b10be237df70eb86ba376ab787fe0c1ad91625eb0a5af792f7c4feab901aca9a2a8139b33b0ee3d47895da4186f17fa688bedde4ebfbe4d11a4780b8d7a80682bc3338e4afa60096e5f9d9b995", &(0x7f0000000700)="387f1cd56e29535d9c108a36ab8087be29dd36fe5e31d48709f219737d98f1253c0c97410a6c1d8123f1f29cb86aa6f40ba67c162f7fd2ec5b38f9125bf344baccae4baa7f404c50bc97bf9147768398e0fe9108a9606af98f1ca0e1803f249deed365056d13b4403fda93624e6b5045f370bd17d2933df5eb993257cc503e18237a14286ef258a05b1196af1ef0a24c1a3dbc073f27da0d50b6cd2e532cafd5d28b77cefa91c86cb4bf7c447244ef224e8ef7bc864eaffc231072df8ddcceb5a2eb106d9fe9dc2e", 0x1, 0x0, 0xf}, 0x50) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000003c0)={r3, 0xa, 0xffffffffffffffff, 0x4000000000000000}) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r5) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000800000000000000019000200000ab30000ff0300000e00000000000000000200ffffe8ff0100730073797a14000000110001000000000000000000070d79d1410000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r0, 0x5, 0x2, &(0x7f0000000440)="62223a670641123c582092fc7f1a513bd2e2b05456307b8ea148877ce887679f21d0c13a76cb396e7546d19aadcf7f38e4fab51fc0f7a898a3787ba533733ecc3e7d200a860a913c6c98f2f8331f5087bc7908051f4ddb415c2224c09a71cf9d7048e081c23fe5252aa5f0992608c358060fe8845a1538a25bd095329693722290cced7aa1dc762b9e9a7257b1800cdeaede25df784bfa37a6c13610af28152f44d196dfd3eb8982e75e45f98f9b75a2c9ad0174d2e1c12b9a18de49be3ad708806c4ceaed08cd", 0xc7) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) 0s ago: executing program 2 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) socket(0x2b, 0x80801, 0x1) (async) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f, 0x10}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f, 0x10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001780)={r5, r6, 0x4}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001780)={r5, r6, 0x4}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x21, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x25a}, @ldst={0x0, 0x0, 0x4, 0x0, 0x5, 0xc, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0xfb, &(0x7f0000001680)=""/251, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x8, 0xe5bf, 0x9}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000017c0)=[{0x2, 0x1, 0x3, 0x6}, {0x2, 0x4, 0x9}, {0x2, 0x1, 0x0, 0x6}, {0x1, 0x3, 0x8, 0xa063176290776a66}, {0x0, 0x1, 0x5, 0x3}, {0x3, 0x3, 0xf, 0x5}, {0x1, 0x4, 0x0, 0x5}, {0x4, 0x2, 0xa, 0xb}, {0x0, 0x3, 0x2, 0x3}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002f40)={@cgroup, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f00)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002f80)={@map, 0xffffffffffffffff, 0x1c, 0x2006, 0xffffffffffffffff, @value, @void, @void, @void, r8}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="270000001c000000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="cbb4e27cf0d9efc9daa0f221", @ANYRES64=r8], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="270000001c000000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="cbb4e27cf0d9efc9daa0f221", @ANYRES64=r8], 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 67.654663][ T5846] cgroup: Unknown subsys name 'net' [ 67.808394][ T5846] cgroup: Unknown subsys name 'cpuset' [ 67.816624][ T5846] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.133710][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.325706][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.332134][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.519655][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.528266][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.536135][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.543977][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.551222][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.558944][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.575677][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.583289][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.595792][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.624949][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.632662][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.665687][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.670203][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.695276][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.703085][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.703256][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.715320][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.717660][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.732524][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.739815][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.743203][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.762719][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.770836][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.779106][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.795529][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.272111][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 72.521670][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 72.534611][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 72.616524][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.623726][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.632174][ T5866] bridge_slave_0: entered allmulticast mode [ 72.641891][ T5866] bridge_slave_0: entered promiscuous mode [ 72.686688][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.693816][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.701072][ T5866] bridge_slave_1: entered allmulticast mode [ 72.707990][ T5866] bridge_slave_1: entered promiscuous mode [ 72.720371][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 72.738115][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 72.817259][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.905786][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.925235][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.932347][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.939667][ T5859] bridge_slave_0: entered allmulticast mode [ 72.946538][ T5859] bridge_slave_0: entered promiscuous mode [ 72.953646][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.960866][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.968321][ T5864] bridge_slave_0: entered allmulticast mode [ 72.975277][ T5864] bridge_slave_0: entered promiscuous mode [ 73.002765][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.009929][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.017469][ T5859] bridge_slave_1: entered allmulticast mode [ 73.024340][ T5859] bridge_slave_1: entered promiscuous mode [ 73.031266][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.038675][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.045882][ T5864] bridge_slave_1: entered allmulticast mode [ 73.052844][ T5864] bridge_slave_1: entered promiscuous mode [ 73.121184][ T5866] team0: Port device team_slave_0 added [ 73.130750][ T5866] team0: Port device team_slave_1 added [ 73.178758][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.242490][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.249883][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.257228][ T5867] bridge_slave_0: entered allmulticast mode [ 73.264109][ T5867] bridge_slave_0: entered promiscuous mode [ 73.273519][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.300904][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.314166][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.321355][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.347262][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.358892][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.366230][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.373369][ T5856] bridge_slave_0: entered allmulticast mode [ 73.381533][ T5856] bridge_slave_0: entered promiscuous mode [ 73.389280][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.396755][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.403886][ T5867] bridge_slave_1: entered allmulticast mode [ 73.411036][ T5867] bridge_slave_1: entered promiscuous mode [ 73.432148][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.442244][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.449431][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.479140][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.497862][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.505628][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.512718][ T5856] bridge_slave_1: entered allmulticast mode [ 73.519813][ T5856] bridge_slave_1: entered promiscuous mode [ 73.539736][ T5859] team0: Port device team_slave_0 added [ 73.548960][ T5859] team0: Port device team_slave_1 added [ 73.612109][ T5864] team0: Port device team_slave_0 added [ 73.621078][ T5864] team0: Port device team_slave_1 added [ 73.643325][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.701509][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.713627][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.723598][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.730955][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.757660][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.775767][ T5862] Bluetooth: hci1: command tx timeout [ 73.775767][ T5871] Bluetooth: hci0: command tx timeout [ 73.792995][ T5866] hsr_slave_0: entered promiscuous mode [ 73.799441][ T5866] hsr_slave_1: entered promiscuous mode [ 73.809928][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.845201][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.852228][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.879023][ T5862] Bluetooth: hci2: command tx timeout [ 73.879037][ T5871] Bluetooth: hci4: command tx timeout [ 73.879199][ T5871] Bluetooth: hci3: command tx timeout [ 73.884849][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.906831][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.913766][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.941205][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.954021][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.960994][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.986917][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.049435][ T5856] team0: Port device team_slave_0 added [ 74.059149][ T5856] team0: Port device team_slave_1 added [ 74.066855][ T5867] team0: Port device team_slave_0 added [ 74.131604][ T5867] team0: Port device team_slave_1 added [ 74.154146][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.161287][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.187510][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.241209][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.250381][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.276501][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.323326][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.330658][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.356648][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.369879][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.376857][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.402775][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.432215][ T5864] hsr_slave_0: entered promiscuous mode [ 74.438450][ T5864] hsr_slave_1: entered promiscuous mode [ 74.444442][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 74.450429][ T5864] Cannot create hsr debugfs directory [ 74.462619][ T5859] hsr_slave_0: entered promiscuous mode [ 74.469346][ T5859] hsr_slave_1: entered promiscuous mode [ 74.475857][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 74.481578][ T5859] Cannot create hsr debugfs directory [ 74.617161][ T5856] hsr_slave_0: entered promiscuous mode [ 74.623720][ T5856] hsr_slave_1: entered promiscuous mode [ 74.630536][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 74.636648][ T5856] Cannot create hsr debugfs directory [ 74.709816][ T5867] hsr_slave_0: entered promiscuous mode [ 74.716308][ T5867] hsr_slave_1: entered promiscuous mode [ 74.722261][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 74.728096][ T5867] Cannot create hsr debugfs directory [ 75.013004][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.026473][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.045749][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.099379][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.211535][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.228767][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.239103][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.251201][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.337568][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.352284][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.363032][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.374073][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.479972][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.496408][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.508109][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.521242][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.555910][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.606898][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.654467][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.661669][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.674001][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.695555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.702705][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.712641][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.741687][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.752777][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.860766][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.867618][ T5871] Bluetooth: hci1: command tx timeout [ 75.868072][ T5876] Bluetooth: hci0: command tx timeout [ 75.880497][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.914454][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.935723][ T5876] Bluetooth: hci2: command tx timeout [ 75.936560][ T5871] Bluetooth: hci4: command tx timeout [ 75.941156][ T5876] Bluetooth: hci3: command tx timeout [ 75.951416][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.998804][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.006051][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.041362][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.051542][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.058703][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.094684][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.101847][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.131725][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.147414][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.154527][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.249795][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.320883][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.328057][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.352062][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.372967][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.401328][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.408559][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.487210][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.513171][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.520327][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.610319][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.617479][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.686191][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.733599][ T5866] veth0_vlan: entered promiscuous mode [ 76.793832][ T5866] veth1_vlan: entered promiscuous mode [ 76.918683][ T5864] veth0_vlan: entered promiscuous mode [ 76.934479][ T5866] veth0_macvtap: entered promiscuous mode [ 76.963344][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.988791][ T5866] veth1_macvtap: entered promiscuous mode [ 77.088832][ T5864] veth1_vlan: entered promiscuous mode [ 77.128871][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.179396][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.232571][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.271638][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.282497][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.297666][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.328246][ T5864] veth0_macvtap: entered promiscuous mode [ 77.336978][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.345826][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.372567][ T5864] veth1_macvtap: entered promiscuous mode [ 77.471476][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.497659][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.553318][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.563109][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.574644][ T5856] veth0_vlan: entered promiscuous mode [ 77.597457][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.606342][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.660901][ T5867] veth0_vlan: entered promiscuous mode [ 77.669153][ T5856] veth1_vlan: entered promiscuous mode [ 77.689436][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.719138][ T5856] veth0_macvtap: entered promiscuous mode [ 77.725340][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.782607][ T5867] veth1_vlan: entered promiscuous mode [ 77.803737][ T5856] veth1_macvtap: entered promiscuous mode [ 77.842037][ T5859] veth0_vlan: entered promiscuous mode [ 77.858389][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.870018][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.883019][ T5867] veth0_macvtap: entered promiscuous mode [ 77.889003][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.896651][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.920596][ T5859] veth1_vlan: entered promiscuous mode [ 77.935500][ T5862] Bluetooth: hci0: command tx timeout [ 77.941624][ T5876] Bluetooth: hci1: command tx timeout [ 77.955862][ T5867] veth1_macvtap: entered promiscuous mode [ 77.987509][ T5859] veth0_macvtap: entered promiscuous mode [ 78.006354][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.015575][ T5876] Bluetooth: hci3: command tx timeout [ 78.020981][ T5876] Bluetooth: hci4: command tx timeout [ 78.026661][ T5862] Bluetooth: hci2: command tx timeout [ 78.040889][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.052798][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.072068][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.076038][ T5859] veth1_macvtap: entered promiscuous mode [ 78.084821][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.118743][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.142329][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.180346][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.199615][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.220877][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.259309][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.308695][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.373104][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'. [ 78.386888][ T5984] tipc: Invalid UDP bearer configuration [ 78.386942][ T5984] tipc: Enabling of bearer rejected, failed to enable media [ 78.403214][ T5986] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6'. [ 78.412889][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.431610][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.469154][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.495133][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.504533][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.600250][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.622945][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.640484][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.640560][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.648460][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.672017][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.748885][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.781136][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.948034][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.957438][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.972059][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.977796][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.123103][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.177721][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.356415][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.383022][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.637255][ T6027] tipc: Started in network mode [ 79.642153][ T6027] tipc: Node identity d206e2ce9518, cluster identity 4711 [ 79.649135][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 79.678758][ T6027] tipc: Enabled bearer , priority 0 [ 79.724106][ T6028] syzkaller0: entered promiscuous mode [ 79.748079][ T6028] syzkaller0: entered allmulticast mode [ 79.780013][ T6027] tipc: Resetting bearer [ 79.814962][ T6026] tipc: Resetting bearer [ 79.875266][ T6026] tipc: Disabling bearer [ 79.915564][ T6044] warning: `syz.3.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.015981][ T5876] Bluetooth: hci1: command tx timeout [ 80.021501][ T5862] Bluetooth: hci0: command tx timeout [ 80.095372][ T5876] Bluetooth: hci3: command tx timeout [ 80.100795][ T5876] Bluetooth: hci4: command tx timeout [ 80.106226][ T5862] Bluetooth: hci2: command tx timeout [ 80.141773][ T6058] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 80.149553][ T6056] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.177068][ T6055] xt_socket: unknown flags 0xe4 [ 80.419994][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 80.552580][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27'. [ 80.686321][ T6088] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET) [ 80.750005][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 81.038755][ T6113] netlink: 36 bytes leftover after parsing attributes in process `syz.0.35'. [ 81.043783][ T6099] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 81.057016][ T6099] netlink: 224 bytes leftover after parsing attributes in process `syz.1.31'. [ 81.254476][ T6127] netlink: 312 bytes leftover after parsing attributes in process `syz.1.40'. [ 81.268034][ T6127] netlink: 792 bytes leftover after parsing attributes in process `syz.1.40'. [ 81.322950][ T6127] Zero length message leads to an empty skb [ 82.121584][ T6166] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 82.138107][ T6166] openvswitch: netlink: Message has 6332 unknown bytes. [ 82.176543][ T5876] Bluetooth: hci4: command tx timeout [ 82.252407][ T6168] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 82.389251][ T6180] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 82.422005][ T6180] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 82.750856][ T6199] sctp: [Deprecated]: syz.2.63 (pid 6199) Use of int in maxseg socket option. [ 82.750856][ T6199] Use struct sctp_assoc_value instead [ 83.142149][ T6222] Bluetooth: MGMT ver 1.23 [ 83.336663][ T6243] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.401515][ T6243] __nla_validate_parse: 14 callbacks suppressed [ 83.401533][ T6243] netlink: 104 bytes leftover after parsing attributes in process `syz.4.75'. [ 83.555197][ T6259] bond_slave_1: entered promiscuous mode [ 83.580797][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 83.714371][ T6269] netlink: 'syz.1.86': attribute type 11 has an invalid length. [ 83.723727][ T6269] netlink: 'syz.1.86': attribute type 11 has an invalid length. [ 83.734582][ T6269] netlink: 224 bytes leftover after parsing attributes in process `syz.1.86'. [ 83.756369][ T6275] trusted_key: syz.4.85 sent an empty control message without MSG_MORE. [ 83.892238][ T6277] netlink: 'syz.1.90': attribute type 10 has an invalid length. [ 83.920486][ T6277] batman_adv: batadv0: Adding interface: team0 [ 83.928092][ T6277] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.963747][ T6277] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 84.253620][ T6301] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 84.317749][ T6309] netlink: 52 bytes leftover after parsing attributes in process `syz.3.95'. [ 84.351718][ T6301] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 84.515673][ T6320] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 84.608255][ T30] audit: type=1800 audit(1757725836.499:2): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.101" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=111 res=0 errno=0 [ 84.865182][ T6348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 84.961419][ T6344] sctp: failed to load transform for md5: -2 [ 85.252404][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 85.272958][ T6359] scsi_nl_rcv_msg: discarding partial skb [ 85.490982][ T6371] tipc: Started in network mode [ 85.500579][ T6371] tipc: Node identity e6cc638c6ec1, cluster identity 4711 [ 85.525266][ T6371] tipc: Enabled bearer , priority 0 [ 85.650082][ T6371] syzkaller0: entered promiscuous mode [ 85.657256][ T6371] syzkaller0: entered allmulticast mode [ 85.664203][ T6371] tipc: Resetting bearer [ 85.707319][ T6370] tipc: Resetting bearer [ 86.568796][ T5931] tipc: Node number set to 2282578828 [ 86.666353][ T849] cfg80211: failed to load regulatory.db [ 86.977618][ T6370] tipc: Disabling bearer [ 86.986883][ T6404] tipc: Invalid UDP bearer configuration [ 86.986935][ T6404] tipc: Enabling of bearer rejected, failed to enable media [ 87.217150][ T6446] netlink: 27 bytes leftover after parsing attributes in process `syz.4.123'. [ 87.217316][ T6443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.123'. [ 87.280934][ T6443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.123'. [ 87.419572][ T6453] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 87.658389][ T6476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.745803][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 87.948967][ T6490] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 87.995547][ T6496] netlink: 'syz.3.144': attribute type 64 has an invalid length. [ 88.194856][ T6508] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 88.202660][ T6508] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 88.210352][ T6508] NCSI netlink: No device for ifindex 131080 [ 88.225289][ T6513] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 88.232935][ T6513] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 88.243729][ T6513] NCSI netlink: No device for ifindex 131080 [ 88.672999][ T6547] __nla_validate_parse: 7 callbacks suppressed [ 88.673016][ T6547] netlink: 216 bytes leftover after parsing attributes in process `syz.4.159'. [ 88.693936][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 88.737512][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 88.889450][ T6566] Illegal XDP return value 2959156651 on prog (id 24) dev syz_tun, expect packet loss! [ 89.037238][ T6573] netlink: 'syz.0.168': attribute type 39 has an invalid length. [ 89.097901][ T6577] tipc: Started in network mode [ 89.109672][ T6577] tipc: Node identity 52aeeca35bfc, cluster identity 4711 [ 89.117094][ T6577] tipc: Enabled bearer , priority 0 [ 89.239872][ T6582] tipc: Disabling bearer [ 89.352088][ T6587] sctp: [Deprecated]: syz.0.173 (pid 6587) Use of int in max_burst socket option deprecated. [ 89.352088][ T6587] Use struct sctp_assoc_value instead [ 89.411047][ T6592] sctp: [Deprecated]: syz.0.173 (pid 6592) Use of int in max_burst socket option deprecated. [ 89.411047][ T6592] Use struct sctp_assoc_value instead [ 89.655654][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 89.843156][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.851432][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.014300][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.031378][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.151201][ T6637] netlink: 72 bytes leftover after parsing attributes in process `syz.1.186'. [ 90.163329][ T6637] netlink: 72 bytes leftover after parsing attributes in process `syz.1.186'. [ 90.177151][ T64] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.187715][ T1334] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.208353][ T1334] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.225660][ T1334] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.558780][ T6662] sctp: [Deprecated]: syz.3.194 (pid 6662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.558780][ T6662] Use struct sctp_sack_info instead [ 90.836830][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 90.854778][ T6680] vlan2: entered allmulticast mode [ 90.859924][ T6680] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 91.106227][ T6688] : entered promiscuous mode [ 91.114470][ T6690] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 91.180881][ T6693] tipc: Enabled bearer , priority 0 [ 91.311539][ T6693] syzkaller0: entered promiscuous mode [ 91.317989][ T6693] syzkaller0: entered allmulticast mode [ 91.325497][ T6697] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 91.531312][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 91.552165][ T6704] netlink: 11 bytes leftover after parsing attributes in process `syz.2.208'. [ 91.612296][ T6692] tipc: Resetting bearer [ 91.674080][ T6692] tipc: Disabling bearer [ 92.548360][ T6748] netlink: 'syz.3.217': attribute type 2 has an invalid length. [ 92.556757][ T6747] gtp0: entered promiscuous mode [ 92.577893][ T6750] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.220'. [ 92.828860][ T6764] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 93.237840][ T6787] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 93.326155][ T6787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.392803][ T6795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.432877][ T6795] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 93.452029][ T6795] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 93.482308][ T6806] netlink: 'syz.1.236': attribute type 10 has an invalid length. [ 93.503038][ T6803] bridge_slave_0: left allmulticast mode [ 93.521316][ T6803] bridge_slave_0: left promiscuous mode [ 93.548845][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.579751][ T6803] bridge_slave_1: left allmulticast mode [ 93.595750][ T6803] bridge_slave_1: left promiscuous mode [ 93.617848][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.660336][ T6803] bond0: (slave bond_slave_0): Releasing backup interface [ 93.708378][ T6803] bond0: (slave bond_slave_1): Releasing backup interface [ 93.765410][ T6803] team0: Port device team_slave_0 removed [ 93.804540][ T6803] team0: Port device team_slave_1 removed [ 93.847154][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.872205][ T6803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.901352][ T6803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.912938][ T6803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.962264][ T6806] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 94.375798][ T6849] tipc: New replicast peer: 0.0.0.0 [ 94.388487][ T6849] tipc: Enabled bearer , priority 10 [ 94.625117][ T6866] __nla_validate_parse: 11 callbacks suppressed [ 94.625137][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 94.662060][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 94.679725][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 94.726398][ T6875] veth1_to_bond: entered allmulticast mode [ 94.839824][ T6865] veth1_to_bond: left allmulticast mode [ 94.947802][ T6891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.263'. [ 95.029128][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 95.044807][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.265'. [ 95.158700][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 95.348465][ T6915] netlink: 9 bytes leftover after parsing attributes in process `syz.4.272'. [ 95.369217][ T6921] netlink: 'syz.3.273': attribute type 2 has an invalid length. [ 95.377249][ T6921] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.273'. [ 95.379897][ T6918] netlink: 5 bytes leftover after parsing attributes in process `syz.4.272'. [ 95.410707][ T6915] gretap0: entered promiscuous mode [ 95.426653][ T6921] nbd: must specify a device to reconfigure [ 95.445537][ T6918] 0{X功: renamed from gretap0 [ 95.472424][ T6918] 0{X功: left promiscuous mode [ 95.495541][ T6918] 0{X功: entered allmulticast mode [ 95.505474][ T24] tipc: Node number set to 1193206478 [ 95.524242][ T6918] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 95.546040][ T6915] 0{X功: entered promiscuous mode [ 95.551434][ T6915] 0{X功: left allmulticast mode [ 96.202222][ T6981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.209693][ T6981] IPv6: NLM_F_CREATE should be set when creating new route [ 96.297472][ T6986] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 96.379668][ T6993] netlink: 'syz.1.299': attribute type 4 has an invalid length. [ 96.419541][ T6992] netlink: 'syz.0.298': attribute type 11 has an invalid length. [ 96.433453][ T6992] netlink: 'syz.0.298': attribute type 11 has an invalid length. [ 96.935846][ T7021] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 97.152442][ T7049] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 97.259237][ T7059] openvswitch: netlink: Message has 4 unknown bytes. [ 97.268365][ T7059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.290875][ T7059] openvswitch: netlink: Message has 4 unknown bytes. [ 97.304447][ T7059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.530189][ T7068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.679147][ T7079] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 97.923159][ T7104] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 98.043998][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.062809][ T7112] netlink: 'syz.2.330': attribute type 16 has an invalid length. [ 98.073282][ T7111] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 98.074409][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.089394][ T7112] netlink: 'syz.2.330': attribute type 17 has an invalid length. [ 98.125791][ T7117] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 98.151586][ T7104] veth1_macvtap: left promiscuous mode [ 98.162038][ T7104] team0: Device veth1_macvtap failed to register rx_handler [ 98.183211][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.209523][ T7111] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 98.270286][ T7112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.287483][ T7117] batadv0: entered promiscuous mode [ 98.296368][ T7117] batadv0: entered allmulticast mode [ 98.303734][ T7117] bond0: (slave batadv0): Releasing backup interface [ 98.332883][ T7117] bridge0: port 1(batadv0) entered blocking state [ 98.352768][ T7117] bridge0: port 1(batadv0) entered disabled state [ 98.655264][ T149] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 98.664628][ T149] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 98.804613][ T7142] tipc: Enabled bearer , priority 0 [ 98.823933][ T7142] syzkaller0: entered promiscuous mode [ 98.833870][ T7142] syzkaller0: entered allmulticast mode [ 98.846271][ T7146] tipc: Started in network mode [ 98.853001][ T7146] tipc: Node identity 36ac63fdb632, cluster identity 4711 [ 98.861870][ T7146] tipc: Enabled bearer , priority 0 [ 98.870932][ T7145] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 98.881319][ T7147] tipc: Resetting bearer [ 98.891559][ T7146] syzkaller0: entered promiscuous mode [ 98.898745][ T7146] syzkaller0: entered allmulticast mode [ 98.915227][ T7141] tipc: Resetting bearer [ 98.949539][ T7141] tipc: Disabling bearer [ 98.989157][ T7153] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 99.084166][ T7146] tipc: Resetting bearer [ 99.115349][ T7144] tipc: Resetting bearer [ 99.188406][ T7144] tipc: Disabling bearer [ 99.416936][ T7184] sctp: [Deprecated]: syz.0.351 (pid 7184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.416936][ T7184] Use struct sctp_sack_info instead [ 99.866542][ T7210] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 99.909753][ T7212] __nla_validate_parse: 48 callbacks suppressed [ 99.909770][ T7212] netlink: 104 bytes leftover after parsing attributes in process `syz.3.360'. [ 99.962056][ T7213] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 99.996010][ T7213] netlink: 172 bytes leftover after parsing attributes in process `syz.1.357'. [ 100.012508][ T7213] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 100.015881][ T7212] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.360'. [ 100.078282][ T7212] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.351414][ T7228] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 100.397792][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 100.401882][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 100.409815][ T7236] sctp: [Deprecated]: syz.4.367 (pid 7236) Use of int in max_burst socket option deprecated. [ 100.409815][ T7236] Use struct sctp_assoc_value instead [ 100.535874][ T7228] bond2: entered promiscuous mode [ 100.541513][ T7228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.614697][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 100.826917][ T7261] netlink: 'syz.2.376': attribute type 21 has an invalid length. [ 100.910865][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 101.112085][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'. [ 101.138797][ T7282] openvswitch: netlink: IP tunnel dst address not specified [ 101.275991][ T7287] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 101.392888][ T7295] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 101.532363][ T7310] netlink: 240 bytes leftover after parsing attributes in process `syz.4.388'. [ 101.550020][ T7312] netlink: 240 bytes leftover after parsing attributes in process `syz.4.388'. [ 101.580400][ T7308] tipc: Enabled bearer , priority 0 [ 101.607691][ T7316] sctp: [Deprecated]: syz.3.389 (pid 7316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.607691][ T7316] Use struct sctp_sack_info instead [ 101.783338][ T7308] syzkaller0: entered promiscuous mode [ 101.805051][ T7308] syzkaller0: entered allmulticast mode [ 101.829545][ T7324] netlink: 'syz.1.391': attribute type 2 has an invalid length. [ 101.830816][ T7308] tipc: Resetting bearer [ 101.921727][ T7307] tipc: Resetting bearer [ 102.993170][ T7307] tipc: Disabling bearer [ 103.010617][ T7334] geneve2: entered promiscuous mode [ 103.016029][ T7334] geneve2: entered allmulticast mode [ 103.098590][ T7346] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 103.155025][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.189173][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.261244][ T149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.290097][ T149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.441620][ T7371] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 103.463667][ T7371] tipc: Enabled bearer , priority 10 [ 103.600404][ T7381] : renamed from hsr0 (while UP) [ 103.921261][ T7410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.169976][ T7428] delete_channel: no stack [ 104.379345][ T7444] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 104.387774][ T7444] netlink: 'syz.0.431': attribute type 3 has an invalid length. [ 104.397175][ T7444] NCSI netlink: No device for ifindex 131080 [ 104.577882][ T10] tipc: Node number set to 156429475 [ 104.616711][ T7453] vlan3: entered promiscuous mode [ 104.621764][ T7453] gretap0: entered promiscuous mode [ 104.798088][ T7463] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 104.998089][ T7482] __nla_validate_parse: 20 callbacks suppressed [ 104.998106][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 105.019791][ T7482] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 105.627417][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 105.658937][ T7522] netlink: 'syz.4.455': attribute type 16 has an invalid length. [ 105.669665][ T7523] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.454'. [ 105.679063][ T7522] netlink: 'syz.4.455': attribute type 17 has an invalid length. [ 105.705951][ T7524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.743801][ T7522] 0{X功: left promiscuous mode [ 105.817042][ T7522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.827330][ T7522] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.841445][ T7522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.905443][ T7525] veth5: entered promiscuous mode [ 105.910603][ T7525] veth5: entered allmulticast mode [ 105.967888][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.460'. [ 105.984172][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'. [ 106.003941][ T7536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.160222][ T7553] netlink: 'syz.0.465': attribute type 39 has an invalid length. [ 106.256379][ T7559] netlink: 'syz.1.466': attribute type 10 has an invalid length. [ 106.321602][ T7559] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 106.328032][ T7564] delete_channel: no stack [ 106.345884][ T7562] delete_channel: no stack [ 106.539189][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.471'. [ 106.693002][ T7585] openvswitch: netlink: Flow key attr not present in new flow. [ 106.701034][ T7584] netlink: 'syz.3.477': attribute type 23 has an invalid length. [ 108.187552][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 108.422590][ T7653] pim6reg1: entered promiscuous mode [ 108.430616][ T7653] pim6reg1: entered allmulticast mode [ 108.528235][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.498'. [ 108.583680][ T7661] nftables ruleset with unbound set [ 109.153610][ T7671] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 109.190471][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 109.203527][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 109.239257][ T7671] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 109.319920][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.334097][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.424890][ T7692] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.576841][ T7698] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 109.690535][ T7701] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 109.764771][ T7714] netlink: 'syz.2.514': attribute type 4 has an invalid length. [ 109.819442][ T7714] `: renamed from bond0 (while UP) [ 109.860965][ T7715] netlink: 'syz.2.514': attribute type 4 has an invalid length. [ 109.978889][ T7727] netlink: 'syz.3.517': attribute type 3 has an invalid length. [ 110.010653][ T7727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.047958][ T10] IPVS: starting estimator thread 0... [ 110.061099][ T7739] __nla_validate_parse: 3 callbacks suppressed [ 110.061115][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.521'. [ 110.092592][ T7739] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 110.104079][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 110.178259][ T7740] IPVS: using max 27 ests per chain, 64800 per kthread [ 110.216551][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.522'. [ 110.221096][ T7748] netlink: 52 bytes leftover after parsing attributes in process `syz.0.525'. [ 110.637297][ T7758] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 110.687571][ T7764] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 111.042962][ T7782] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.537'. [ 111.068802][ T7782] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.537'. [ 111.069836][ T7785] netlink: 18 bytes leftover after parsing attributes in process `syz.0.538'. [ 111.147376][ T7782] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 111.175979][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 111.270202][ T7790] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 111.514444][ T7800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.776241][ T7810] netlink: 32 bytes leftover after parsing attributes in process `syz.4.545'. [ 112.890632][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'. [ 112.914606][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 113.168358][ T7840] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 113.233299][ T7840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.251969][ T7842] bond2: (slave gretap1): making interface the new active one [ 113.279270][ T7842] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 113.854906][ T5876] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 113.855417][ T5862] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.388056][ T7919] netlink: 'syz.2.571': attribute type 10 has an invalid length. [ 114.590648][ T7919] `: (slave bridge0): Enslaving as an active interface with an up link [ 114.608088][ T7918] bridge_slave_1: left allmulticast mode [ 114.614034][ T7918] bridge_slave_1: left promiscuous mode [ 114.672297][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.731747][ T7918] bridge_slave_0: left allmulticast mode [ 114.742697][ T7918] bridge_slave_0: left promiscuous mode [ 114.750956][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.795628][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 114.832492][ T7918] `: (slave bridge0): Releasing backup interface [ 114.921684][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 114.932947][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.974229][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 115.032273][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 115.114640][ T7939] __nla_validate_parse: 48 callbacks suppressed [ 115.114666][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 115.128289][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 115.190111][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 115.242525][ T7959] Dead loop on virtual device ip6_vti0, fix it urgently! [ 115.255158][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 115.265269][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 115.282131][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 115.288541][ T7961] netlink: 160 bytes leftover after parsing attributes in process `syz.0.582'. [ 115.306280][ T7961] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.315436][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 115.330124][ T7965] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 115.342273][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 115.348328][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 115.359612][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 115.368714][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 115.401571][ T7961] bridge0: port 2(vlan2) entered blocking state [ 115.415489][ T7961] bridge0: port 2(vlan2) entered disabled state [ 115.423422][ T7961] vlan2: entered allmulticast mode [ 115.428758][ T7961] bridge0: entered allmulticast mode [ 115.445849][ T7961] vlan2: left allmulticast mode [ 115.451750][ T7961] bridge0: left allmulticast mode [ 115.481893][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 115.513345][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 115.513818][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 115.522267][ T7938] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 115.540859][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.572671][ T7975] bridge_slave_0 (unregistering): left allmulticast mode [ 115.581647][ T7975] bridge_slave_0 (unregistering): left promiscuous mode [ 115.588813][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.965346][ T7998] team0 (unregistering): Port device team_slave_0 removed [ 115.977939][ T7998] team0 (unregistering): Port device team_slave_1 removed [ 116.053051][ T64] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.076835][ T64] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.089278][ T64] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.098943][ T64] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.330605][ T8032] syzkaller1: entered promiscuous mode [ 116.341793][ T8032] syzkaller1: entered allmulticast mode [ 116.418938][ T8039] IPVS: ip_vs_edit_dest(): server weight less than zero [ 116.426158][ T5917] IPVS: starting estimator thread 0... [ 116.515132][ T8041] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.710111][ T8051] bridge3: entered promiscuous mode [ 116.724140][ T8051] bridge3: entered allmulticast mode [ 116.773068][ T8051] bond3: entered promiscuous mode [ 116.778758][ T8051] bond3: entered allmulticast mode [ 116.784397][ T8051] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.793540][ T8057] batadv_slave_0: entered promiscuous mode [ 116.846941][ T8057] batadv_slave_0: left promiscuous mode [ 117.471162][ T8113] sctp: [Deprecated]: syz.1.625 (pid 8113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.471162][ T8113] Use struct sctp_sack_info instead [ 117.515505][ T8113] sctp: [Deprecated]: syz.1.625 (pid 8113) Use of int in maxseg socket option. [ 117.515505][ T8113] Use struct sctp_assoc_value instead [ 119.251899][ T8199] 8021q: VLANs not supported on ip6tnl0 [ 119.258724][ T8199] atomic_op ffff88807ebe3998 conn xmit_atomic 0000000000000000 [ 119.588597][ T8210] can: request_module (can-proto-3) failed. [ 119.631000][ T8217] syz_tun: entered promiscuous mode [ 119.646187][ T8220] raw_sendmsg: syz.2.656 forgot to set AF_INET. Fix it! [ 119.662105][ T8217] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 119.857148][ T8229] tipc: Started in network mode [ 119.878259][ T8229] tipc: Node identity 7ad1c526a506, cluster identity 4711 [ 119.885782][ T8229] tipc: Enabled bearer , priority 0 [ 119.908442][ T8232] bond_slave_1: entered allmulticast mode [ 119.946733][ T8232] tipc: Resetting bearer [ 119.952715][ T8229] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 120.045818][ T8228] tipc: Disabling bearer [ 120.297432][ T8257] __nla_validate_parse: 15 callbacks suppressed [ 120.297450][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'. [ 120.313157][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 120.357150][ T8263] vxlan0: entered promiscuous mode [ 120.363610][ T8263] vxlan0: entered allmulticast mode [ 120.372839][ T1334] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.393944][ T1334] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.412282][ T1334] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.433671][ T1334] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.477575][ T8270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.665'. [ 120.484044][ T8273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'. [ 120.520735][ T8274] syz.0.671 uses old SIOCAX25GETINFO [ 120.649422][ T8278] netlink: 'syz.3.674': attribute type 11 has an invalid length. [ 120.657683][ T8278] netlink: 'syz.3.674': attribute type 11 has an invalid length. [ 120.675073][ T8278] netlink: 152 bytes leftover after parsing attributes in process `syz.3.674'. [ 120.723225][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 120.782177][ T8288] hsr_slave_0: left promiscuous mode [ 120.832704][ T8288] hsr_slave_1: left promiscuous mode [ 120.901679][ T8296] netlink: zone id is out of range [ 120.906946][ T8296] netlink: zone id is out of range [ 120.912157][ T8296] netlink: zone id is out of range [ 120.917429][ T8296] netlink: zone id is out of range [ 120.922590][ T8296] netlink: zone id is out of range [ 120.931595][ T8296] netlink: zone id is out of range [ 120.937223][ T8296] netlink: zone id is out of range [ 120.942380][ T8296] netlink: zone id is out of range [ 120.947673][ T8296] netlink: zone id is out of range [ 120.953682][ T8296] netlink: zone id is out of range [ 121.450628][ T8332] netem: incorrect gi model size [ 121.471184][ T8332] netem: change failed [ 121.566799][ T8339] validate_nla: 6 callbacks suppressed [ 121.566817][ T8339] netlink: 'syz.4.695': attribute type 10 has an invalid length. [ 121.689143][ T8349] netlink: 84 bytes leftover after parsing attributes in process `syz.1.697'. [ 121.711049][ T8349] netlink: 84 bytes leftover after parsing attributes in process `syz.1.697'. [ 121.717969][ T8356] netlink: 14 bytes leftover after parsing attributes in process `syz.3.700'. [ 121.858606][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 121.892660][ T8356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.904643][ T8356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.916717][ T8356] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 121.930383][ T8356] bond0 (unregistering): Released all slaves [ 122.054590][ T8370] netlink: 'syz.4.704': attribute type 10 has an invalid length. [ 122.118694][ T8370] team0: Port device dummy0 added [ 122.155360][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.173452][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.266795][ T8382] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 122.327159][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.439403][ T8382] veth3: entered promiscuous mode [ 122.451339][ T8382] bond0: (slave veth3): Enslaving as an active interface with an up link [ 124.087230][ T8445] netlink: 'syz.2.725': attribute type 13 has an invalid length. [ 124.152075][ T8445] netlink: 'syz.2.725': attribute type 13 has an invalid length. [ 124.168273][ T8451] netlink: 'syz.0.726': attribute type 33 has an invalid length. [ 124.234486][ T8450] netlink: 'syz.2.725': attribute type 12 has an invalid length. [ 124.740055][ T8473] tipc: Enabled bearer , priority 0 [ 124.757355][ T8473] syzkaller0: entered promiscuous mode [ 124.772691][ T8473] syzkaller0: entered allmulticast mode [ 124.801572][ T8473] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 124.860080][ T8473] tipc: Resetting bearer [ 124.880933][ T8472] tipc: Resetting bearer [ 124.913068][ T8472] tipc: Disabling bearer [ 125.207917][ T8497] : entered promiscuous mode [ 125.394389][ T8510] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.535523][ T8510] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.624632][ T8510] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.631351][ T8528] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 125.657608][ T8524] syzkaller1: entered promiscuous mode [ 125.663840][ T8524] syzkaller1: entered allmulticast mode [ 125.673187][ T8528] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 125.700896][ T8510] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.878289][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.931808][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.981663][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.009872][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.574911][ C1] net_ratelimit: 5 callbacks suppressed [ 126.574928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.638767][ T8593] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 126.647938][ T8591] __nla_validate_parse: 13 callbacks suppressed [ 126.647955][ T8591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.766'. [ 126.676021][ T8595] 8021q: VLANs not supported on ip6_vti0 [ 126.690169][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'. [ 126.729496][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'. [ 126.851586][ T8611] Bluetooth: MGMT ver 1.23 [ 126.852687][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 126.874029][ T8611] IPVS: set_ctl: invalid protocol: 183 224.0.0.2:0 [ 126.975388][ T8621] tipc: Enabled bearer , priority 0 [ 126.983228][ T8621] syzkaller0: entered promiscuous mode [ 126.988972][ T8621] syzkaller0: entered allmulticast mode [ 126.996670][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'. [ 127.009800][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'. [ 127.028735][ T8621] tipc: Resetting bearer [ 127.046844][ T8623] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 127.054887][ T8620] tipc: Resetting bearer [ 127.072044][ T8620] tipc: Disabling bearer [ 127.245907][ T8633] netlink: 'syz.3.781': attribute type 10 has an invalid length. [ 127.268053][ T8633] netlink: 'syz.3.781': attribute type 10 has an invalid length. [ 127.279461][ T8633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.781'. [ 127.288992][ T8633] batadv0: entered promiscuous mode [ 127.304237][ T8633] batadv0: entered allmulticast mode [ 127.323723][ T8633] bridge0: port 1(batadv0) entered blocking state [ 127.345602][ T8633] bridge0: port 1(batadv0) entered disabled state [ 127.356539][ T8645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.479990][ T1334] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 127.489567][ T1334] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 127.653980][ T8633] syzkaller1: entered promiscuous mode [ 127.659852][ T8633] syzkaller1: entered allmulticast mode [ 127.742272][ T8663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.788'. [ 127.832040][ T8659] netlink: 55 bytes leftover after parsing attributes in process `syz.1.787'. [ 127.843196][ T8659] tc_dump_action: action bad kind [ 127.998877][ T8678] netlink: 'syz.3.793': attribute type 13 has an invalid length. [ 128.071209][ T8678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.094489][ T8684] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 128.132752][ T8684] netlink: 224 bytes leftover after parsing attributes in process `syz.4.794'. [ 128.232312][ T8691] tipc: Enabled bearer , priority 0 [ 128.242037][ T8696] netlink: 'syz.3.797': attribute type 64 has an invalid length. [ 128.283006][ T8693] tipc: Disabling bearer [ 129.119158][ T8740] netlink: 'syz.4.810': attribute type 1 has an invalid length. [ 129.151328][ T8738] netlink: 'syz.4.810': attribute type 1 has an invalid length. [ 129.167712][ T8744] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 129.177258][ T8738] tc_dump_action: action bad kind [ 129.407634][ T8757] pim6reg: entered allmulticast mode [ 129.420723][ T8761] netlink: zone id is out of range [ 129.426251][ T8761] netlink: zone id is out of range [ 129.438275][ T8761] netlink: zone id is out of range [ 129.454068][ T8761] netlink: zone id is out of range [ 129.474012][ T8761] netlink: zone id is out of range [ 129.508725][ T8761] netlink: zone id is out of range [ 129.510890][ T8767] smc: net device erspan0 applied user defined pnetid SYZ0 [ 129.529620][ T8761] netlink: zone id is out of range [ 129.542354][ T8761] netlink: zone id is out of range [ 129.555643][ T8770] netlink: 'syz.3.821': attribute type 5 has an invalid length. [ 130.825372][ T8854] veth0: entered promiscuous mode [ 130.853993][ T8853] veth0: left promiscuous mode [ 131.095293][ T8869] pim6reg: entered allmulticast mode [ 131.714414][ T8891] __nla_validate_parse: 20 callbacks suppressed [ 131.714432][ T8891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.867'. [ 131.737342][ T8903] validate_nla: 4 callbacks suppressed [ 131.737358][ T8903] netlink: 'syz.0.870': attribute type 23 has an invalid length. [ 131.878072][ T8912] netlink: 116 bytes leftover after parsing attributes in process `syz.0.872'. [ 131.896915][ T5917] IPVS: starting estimator thread 0... [ 131.994859][ T8915] IPVS: using max 29 ests per chain, 69600 per kthread [ 132.038283][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 132.078270][ T8924] gtp0: entered promiscuous mode [ 132.083251][ T8924] gtp0: entered allmulticast mode [ 132.103679][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 132.117737][ T8926] net_ratelimit: 221 callbacks suppressed [ 132.117753][ T8926] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 132.151484][ T8926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.288104][ T8937] v: renamed from veth0_macvtap (while UP) [ 132.555938][ T8949] netlink: 'syz.1.884': attribute type 11 has an invalid length. [ 132.588853][ T8949] netlink: 224 bytes leftover after parsing attributes in process `syz.1.884'. [ 132.603116][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 132.742796][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.874069][ T8973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 132.883160][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 132.893448][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 133.026276][ T8975] netlink: 'syz.2.893': attribute type 1 has an invalid length. [ 133.036196][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 133.588855][ T24] IPVS: starting estimator thread 0... [ 133.676761][ T9016] IPVS: using max 29 ests per chain, 69600 per kthread [ 133.850821][ T9035] netlink: 'syz.2.912': attribute type 16 has an invalid length. [ 133.870050][ T9035] netlink: 'syz.2.912': attribute type 17 has an invalid length. [ 133.896136][ T9035] 8021q: adding VLAN 0 to HW filter on device ` [ 133.911046][ T9035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.932543][ T9044] netlink: 'syz.3.915': attribute type 29 has an invalid length. [ 134.038550][ T9046] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 134.050629][ T9046] netlink: 'syz.2.916': attribute type 15 has an invalid length. [ 134.059776][ T9049] netlink: 'syz.2.916': attribute type 15 has an invalid length. [ 134.069019][ T9048] netlink: 'syz.3.918': attribute type 13 has an invalid length. [ 134.090470][ T9048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.074222][ T9114] bridge3: entered promiscuous mode [ 135.079623][ T9114] bridge3: entered allmulticast mode [ 135.337356][ T9136] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 135.698559][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055558400: rx timeout, send abort [ 135.708110][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055558400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.983151][ T9166] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 136.008695][ T9166] netlink: 'syz.2.954': attribute type 2 has an invalid length. [ 136.358579][ T9189] pim6reg1: entered promiscuous mode [ 136.363905][ T9189] pim6reg1: entered allmulticast mode [ 136.917882][ T9250] tipc: Enabling of bearer rejected, failed to enable media [ 136.954525][ T9251] validate_nla: 1 callbacks suppressed [ 136.954539][ T9251] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 136.976766][ T9251] __nla_validate_parse: 12 callbacks suppressed [ 136.976781][ T9251] netlink: 244 bytes leftover after parsing attributes in process `syz.0.976'. [ 136.992208][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 137.034558][ T9258] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.978'. [ 137.284427][ T9271] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 138.297894][ T9339] sctp: [Deprecated]: syz.3.1003 (pid 9339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.297894][ T9339] Use struct sctp_sack_info instead [ 138.340355][ T9346] netlink: 'syz.2.1004': attribute type 29 has an invalid length. [ 138.367912][ T9347] netlink: 'syz.2.1004': attribute type 29 has an invalid length. [ 138.396207][ T9346] netlink: 'syz.2.1004': attribute type 29 has an invalid length. [ 138.592331][ T9360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.709997][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 138.968989][ T9391] IPVS: set_ctl: invalid protocol: 20551 255.255.255.255:20004 [ 138.986292][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 139.144623][ T9408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.212726][ T9411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1022'. [ 139.221975][ T9414] macvlan2: entered allmulticast mode [ 139.222496][ T9414] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 139.258022][ T9417] netlink: 'syz.4.1025': attribute type 12 has an invalid length. [ 139.269500][ T9417] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 139.400199][ T9425] netlink: 'syz.2.1028': attribute type 1 has an invalid length. [ 139.504445][ T9425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.924196][ T30] audit: type=1800 audit(1757725891.809:3): pid=9444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1030" name="memory.events" dev="tmpfs" ino=1197 res=0 errno=0 [ 140.291164][ T9459] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1035'. [ 140.331422][ T9460] sch_fq: defrate 0 ignored. [ 140.404017][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1035'. [ 140.657822][ T9481] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1038'. [ 140.702000][ T9481] IPv6: sit1: Disabled Multicast RS [ 140.716086][ T9481] sit1: entered allmulticast mode [ 140.870410][ T9496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1047'. [ 140.891033][ T9496] ip6gretap0: entered promiscuous mode [ 141.075220][ T9511] team0: Device vti0 is up. Set it down before adding it as a team port [ 141.152597][ T9517] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 141.196845][ T9517] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 141.485442][ T9534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.685471][ T9549] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 141.775282][ T9367] wlan0: Trigger new scan to find an IBSS to join [ 142.131315][ T9566] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 142.139205][ T9566] __nla_validate_parse: 6 callbacks suppressed [ 142.139220][ T9566] netlink: 5512 bytes leftover after parsing attributes in process `syz.2.1067'. [ 142.225541][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 142.272471][ T9580] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 142.281155][ T9580] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 142.680510][ T9612] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 142.764524][ T9612] gretap2: entered promiscuous mode [ 142.767884][ T9616] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20002 [ 142.828802][ T9612] bond4: (slave gretap2): making interface the new active one [ 142.841312][ T9612] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 142.867186][ T9622] bond4: entered promiscuous mode [ 142.873182][ T9622] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 142.885545][ T9622] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 142.902208][ T9622] bond4: left promiscuous mode [ 143.031449][ T9634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1086'. [ 143.165077][ T9638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.798653][ T9671] netlink: 'syz.4.1097': attribute type 16 has an invalid length. [ 143.817795][ T9671] netlink: 'syz.4.1097': attribute type 17 has an invalid length. [ 143.878532][ T9671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.026298][ T9685] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1102'. [ 144.037275][ T9686] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1102'. [ 144.202583][ T9692] bridge_slave_0: invalid flags given to default FDB implementation [ 144.266368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.269379][ T9692] batman_adv: batadv0: Removing interface: team0 [ 144.292467][ T9692] team0 (unregistering): Port device team_slave_0 removed [ 144.304519][ T9692] team0 (unregistering): Port device team_slave_1 removed [ 144.330398][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 144.613245][ T9710] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 144.735838][ T9362] wlan0: Trigger new scan to find an IBSS to join [ 144.838753][ T9727] netlink: 'syz.0.1113': attribute type 18 has an invalid length. [ 144.890292][ T9367] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.931445][ T9367] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.976577][ T9367] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.001913][ T9367] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.098330][ T9732] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1118'. [ 145.268103][ T9748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.500884][ T9752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.821801][ T9770] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 145.876584][ T9770] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.930322][ T9770] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.167612][ T9756] syz.1.1122 (9756) used greatest stack depth: 17768 bytes left [ 146.317910][ T9799] netlink: 'syz.3.1137': attribute type 4 has an invalid length. [ 146.439717][ T9809] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1140'. [ 146.468249][ T9801] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 146.500592][ T9809] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1140'. [ 146.625392][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 146.683755][ T9819] bond0: (slave syz_tun): Releasing backup interface [ 146.705358][ T9824] 8021q: VLANs not supported on sit0 [ 147.249347][ T9855] netlink: 'syz.0.1157': attribute type 3 has an invalid length. [ 147.281495][ T9860] __nla_validate_parse: 2 callbacks suppressed [ 147.281511][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 147.475096][ T9874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1161'. [ 147.484175][ T9874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1161'. [ 147.724635][ T9887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.785048][ T9362] wlan0: Trigger new scan to find an IBSS to join [ 147.920857][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1173'. [ 148.344117][ T9910] lo speed is unknown, defaulting to 1000 [ 148.378352][ T9910] lo speed is unknown, defaulting to 1000 [ 148.410194][ T9910] lo speed is unknown, defaulting to 1000 [ 148.783004][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.798455][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1184'. [ 148.897919][ T9910] infiniband syz0: set active [ 148.902804][ T9910] infiniband syz0: added lo [ 148.909668][ T9900] lo speed is unknown, defaulting to 1000 [ 149.044452][ T9910] RDS/IB: syz0: added [ 149.065397][ T9910] smc: adding ib device syz0 with port count 1 [ 149.090660][ T9910] smc: ib device syz0 port 1 has pnetid [ 149.113018][ T9948] sctp: [Deprecated]: syz.0.1188 (pid 9948) Use of int in max_burst socket option. [ 149.113018][ T9948] Use struct sctp_assoc_value instead [ 149.122690][ T9900] lo speed is unknown, defaulting to 1000 [ 149.162403][ T9910] lo speed is unknown, defaulting to 1000 [ 149.196502][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1189'. [ 149.390209][ T9954] IPVS: Error connecting to the multicast addr [ 149.679552][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1196'. [ 149.694907][ T9978] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1193'. [ 149.769288][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 149.787645][ T9983] netlink: 'syz.3.1198': attribute type 7 has an invalid length. [ 149.814930][ T9983] netlink: 'syz.3.1198': attribute type 8 has an invalid length. [ 149.830255][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 149.916684][ T9910] lo speed is unknown, defaulting to 1000 [ 150.218533][T10003] netlink: 'syz.3.1202': attribute type 10 has an invalid length. [ 150.708220][ T9910] lo speed is unknown, defaulting to 1000 [ 150.793694][T10034] netlink: 'syz.3.1211': attribute type 17 has an invalid length. [ 150.800040][T10037] netlink: 'syz.2.1213': attribute type 7 has an invalid length. [ 150.814937][T10037] netlink: 'syz.2.1213': attribute type 8 has an invalid length. [ 151.016325][T10054] netlink: 'syz.3.1215': attribute type 29 has an invalid length. [ 151.045753][T10054] netlink: 'syz.3.1215': attribute type 29 has an invalid length. [ 151.603978][T10085] macsec1: entered promiscuous mode [ 151.636801][T10085] macsec1: entered allmulticast mode [ 151.663667][ T9910] lo speed is unknown, defaulting to 1000 [ 152.168842][T10112] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 152.309144][T10118] __nla_validate_parse: 19 callbacks suppressed [ 152.309164][T10118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1234'. [ 152.345502][T10112] veth5: entered promiscuous mode [ 152.353585][ T9910] lo speed is unknown, defaulting to 1000 [ 152.549642][T10129] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1240'. [ 152.549648][T10133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1240'. [ 152.969851][T10163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1247'. [ 153.094368][T10166] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1250'. [ 153.135487][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.141437][T10170] bridge5: entered promiscuous mode [ 153.189857][T10170] bridge6: entered promiscuous mode [ 153.237135][T10169] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 153.242088][T10174] lo speed is unknown, defaulting to 1000 [ 153.261481][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1252'. [ 153.310494][T10169] virtio_net virtio1 eth0: entered promiscuous mode [ 153.324996][T10169] virtio_net virtio1 eth0: entered allmulticast mode [ 153.434194][T10186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1254'. [ 153.714452][T10203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1261'. [ 153.761570][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 153.982837][T10218] nbd: must specify an index to disconnect [ 154.007768][T10218] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 168.095492][ C1] ================================================================== [ 168.103590][ C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0 [ 168.111642][ C1] Write of size 8 at addr ffff888032f3e670 by task kworker/u8:15/9367 [ 168.119765][ C1] [ 168.122081][ C1] CPU: 1 UID: 0 PID: 9367 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 168.122095][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.122103][ C1] Workqueue: 0x0 (events_unbound) [ 168.122128][ C1] Call Trace: [ 168.122133][ C1] [ 168.122138][ C1] dump_stack_lvl+0x189/0x250 [ 168.122152][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 168.122165][ C1] ? rcu_is_watching+0x15/0xb0 [ 168.122175][ C1] ? __kasan_check_byte+0x12/0x40 [ 168.122189][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.122199][ C1] ? rcu_is_watching+0x15/0xb0 [ 168.122209][ C1] ? lock_release+0x4b/0x3e0 [ 168.122224][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 168.122236][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 168.122248][ C1] print_report+0xca/0x240 [ 168.122262][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 168.122273][ C1] kasan_report+0x118/0x150 [ 168.122287][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 168.122299][ C1] __xfrm_state_delete+0x696/0xca0 [ 168.122313][ C1] xfrm_timer_handler+0x18f/0xa00 [ 168.122325][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 168.122335][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 168.122351][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.122361][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 168.122376][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 168.122391][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 168.122402][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 168.122412][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 168.122426][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 168.122435][ C1] ? read_tsc+0x9/0x20 [ 168.122449][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 168.122460][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 168.122471][ C1] handle_softirqs+0x283/0x870 [ 168.122482][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 168.122492][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 168.122503][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 168.122516][ C1] __irq_exit_rcu+0xca/0x1f0 [ 168.122526][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 168.122537][ C1] irq_exit_rcu+0x9/0x30 [ 168.122546][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 168.122556][ C1] [ 168.122559][ C1] [ 168.122563][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.122575][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 168.122589][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 df 96 eb 09 e8 8a 41 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 168.122598][ C1] RSP: 0018:ffffc9001c1e79b8 EFLAGS: 00000286 [ 168.122607][ C1] RAX: 1fb7f5522591a400 RBX: 0000000000000000 RCX: 1fb7f5522591a400 [ 168.122614][ C1] RDX: 0000000000000000 RSI: ffffffff8d9b9ce8 RDI: ffffffff8be33c00 [ 168.122621][ C1] RBP: ffffc9001c1e7a10 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6 [ 168.122628][ C1] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffff88806c02bc00 [ 168.122635][ C1] R13: dffffc0000000000 R14: ffff88801d6c8000 R15: ffff8880b873ab58 [ 168.122647][ C1] ? finish_task_switch+0x266/0x950 [ 168.122661][ C1] __schedule+0x17a0/0x4cc0 [ 168.122674][ C1] ? __lock_acquire+0xab9/0xd20 [ 168.122688][ C1] ? __pfx___schedule+0x10/0x10 [ 168.122700][ C1] ? schedule+0x91/0x360 [ 168.122708][ C1] schedule+0x165/0x360 [ 168.122717][ C1] worker_thread+0xa82/0xda0 [ 168.122733][ C1] kthread+0x70e/0x8a0 [ 168.122745][ C1] ? __pfx_worker_thread+0x10/0x10 [ 168.122755][ C1] ? __pfx_kthread+0x10/0x10 [ 168.122767][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.122780][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.122789][ C1] ? __pfx_kthread+0x10/0x10 [ 168.122800][ C1] ret_from_fork+0x436/0x7d0 [ 168.122811][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 168.122821][ C1] ? __switch_to_asm+0x39/0x70 [ 168.122833][ C1] ? __switch_to_asm+0x33/0x70 [ 168.122845][ C1] ? __pfx_kthread+0x10/0x10 [ 168.122856][ C1] ret_from_fork_asm+0x1a/0x30 [ 168.122871][ C1] [ 168.122875][ C1] [ 168.509518][ C1] Allocated by task 8591: [ 168.513821][ C1] kasan_save_track+0x3e/0x80 [ 168.518481][ C1] __kasan_slab_alloc+0x6c/0x80 [ 168.523311][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 168.528745][ C1] xfrm_state_alloc+0x24/0x2f0 [ 168.533485][ C1] __find_acq_core+0x8a7/0x1c00 [ 168.538312][ C1] xfrm_find_acq+0x78/0xa0 [ 168.542722][ C1] xfrm_alloc_userspi+0x6b3/0xc90 [ 168.547741][ C1] xfrm_user_rcv_msg+0x7a3/0xab0 [ 168.552665][ C1] netlink_rcv_skb+0x208/0x470 [ 168.557404][ C1] xfrm_netlink_rcv+0x79/0x90 [ 168.562065][ C1] netlink_unicast+0x82f/0x9e0 [ 168.566852][ C1] netlink_sendmsg+0x805/0xb30 [ 168.571610][ C1] __sock_sendmsg+0x21c/0x270 [ 168.576266][ C1] ____sys_sendmsg+0x505/0x830 [ 168.581013][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 168.585677][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 168.590593][ C1] do_syscall_64+0xfa/0x3b0 [ 168.595073][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.600943][ C1] [ 168.603249][ C1] Freed by task 5868: [ 168.607202][ C1] kasan_save_track+0x3e/0x80 [ 168.611862][ C1] kasan_save_free_info+0x46/0x50 [ 168.616882][ C1] __kasan_slab_free+0x5b/0x80 [ 168.621623][ C1] kmem_cache_free+0x18f/0x400 [ 168.626364][ C1] xfrm_state_gc_task+0x52d/0x6b0 [ 168.631548][ C1] process_scheduled_works+0xae1/0x17b0 [ 168.637077][ C1] worker_thread+0x8a0/0xda0 [ 168.641645][ C1] kthread+0x70e/0x8a0 [ 168.645691][ C1] ret_from_fork+0x436/0x7d0 [ 168.650275][ C1] ret_from_fork_asm+0x1a/0x30 [ 168.655060][ C1] [ 168.657374][ C1] The buggy address belongs to the object at ffff888032f3e640 [ 168.657374][ C1] which belongs to the cache xfrm_state of size 928 [ 168.671319][ C1] The buggy address is located 48 bytes inside of [ 168.671319][ C1] freed 928-byte region [ffff888032f3e640, ffff888032f3e9e0) [ 168.685006][ C1] [ 168.687315][ C1] The buggy address belongs to the physical page: [ 168.693715][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032f3d980 pfn:0x32f3c [ 168.703794][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 168.712272][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 168.719801][ C1] page_type: f5(slab) [ 168.723760][ C1] raw: 00fff00000000040 ffff88801ab88640 dead000000000122 0000000000000000 [ 168.732316][ C1] raw: ffff888032f3d980 00000000800f000b 00000000f5000000 0000000000000000 [ 168.740873][ C1] head: 00fff00000000040 ffff88801ab88640 dead000000000122 0000000000000000 [ 168.749531][ C1] head: ffff888032f3d980 00000000800f000b 00000000f5000000 0000000000000000 [ 168.758181][ C1] head: 00fff00000000002 ffffea0000cbcf01 00000000ffffffff 00000000ffffffff [ 168.766828][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 168.775470][ C1] page dumped because: kasan: bad access detected [ 168.781876][ C1] page_owner tracks the page as allocated [ 168.787563][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6010, tgid 6009 (syz.0.11), ts 79200060687, free_ts 79085527638 [ 168.806460][ C1] post_alloc_hook+0x240/0x2a0 [ 168.811213][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 168.816741][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 168.822519][ C1] alloc_pages_mpol+0x232/0x4a0 [ 168.827366][ C1] allocate_slab+0x8a/0x370 [ 168.831841][ C1] ___slab_alloc+0xbeb/0x1420 [ 168.836501][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 168.841971][ C1] xfrm_state_alloc+0x24/0x2f0 [ 168.846713][ C1] pfkey_add+0x6e4/0x2e00 [ 168.851016][ C1] pfkey_sendmsg+0xbfe/0x1090 [ 168.855692][ C1] __sock_sendmsg+0x21c/0x270 [ 168.860350][ C1] ____sys_sendmsg+0x505/0x830 [ 168.865090][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 168.869763][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 168.874678][ C1] do_syscall_64+0xfa/0x3b0 [ 168.879158][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.885039][ C1] page last free pid 5233 tgid 5233 stack trace: [ 168.891345][ C1] __free_frozen_pages+0xbc4/0xd30 [ 168.896463][ C1] __put_partials+0x156/0x1a0 [ 168.901114][ C1] put_cpu_partial+0x17c/0x250 [ 168.905852][ C1] __slab_free+0x2d5/0x3c0 [ 168.910255][ C1] qlist_free_all+0x97/0x140 [ 168.914824][ C1] kasan_quarantine_reduce+0x148/0x160 [ 168.920264][ C1] __kasan_slab_alloc+0x22/0x80 [ 168.925090][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 168.930524][ C1] getname_flags+0xb8/0x540 [ 168.934999][ C1] do_sys_openat2+0xbc/0x1c0 [ 168.939563][ C1] __x64_sys_openat+0x138/0x170 [ 168.944383][ C1] do_syscall_64+0xfa/0x3b0 [ 168.948858][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.954729][ C1] [ 168.957040][ C1] Memory state around the buggy address: [ 168.962643][ C1] ffff888032f3e500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 168.970693][ C1] ffff888032f3e580: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 168.978730][ C1] >ffff888032f3e600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 168.986762][ C1] ^ [ 168.994446][ C1] ffff888032f3e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.002489][ C1] ffff888032f3e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.010529][ C1] ================================================================== [ 169.018623][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.025803][ C1] CPU: 1 UID: 0 PID: 9367 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 169.035317][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.045365][ C1] Workqueue: 0x0 (events_unbound) [ 169.050461][ C1] Call Trace: [ 169.053716][ C1] [ 169.056558][ C1] dump_stack_lvl+0x99/0x250 [ 169.061126][ C1] ? __asan_memcpy+0x40/0x70 [ 169.065693][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.070881][ C1] ? __pfx__printk+0x10/0x10 [ 169.075450][ C1] vpanic+0x281/0x750 [ 169.079411][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 169.084587][ C1] ? __pfx_vpanic+0x10/0x10 [ 169.089074][ C1] ? irqentry_exit+0x74/0x90 [ 169.093639][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.098810][ C1] panic+0xb9/0xc0 [ 169.102506][ C1] ? __pfx_panic+0x10/0x10 [ 169.106923][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 169.112803][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.119134][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 169.124395][ C1] check_panic_on_warn+0x89/0xb0 [ 169.129333][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 169.134632][ C1] end_report+0x78/0x160 [ 169.138855][ C1] kasan_report+0x129/0x150 [ 169.143335][ C1] ? __xfrm_state_delete+0x696/0xca0 [ 169.148598][ C1] __xfrm_state_delete+0x696/0xca0 [ 169.153688][ C1] xfrm_timer_handler+0x18f/0xa00 [ 169.158690][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 169.164213][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 169.170108][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.175287][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 169.181185][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 169.187499][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 169.193023][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 169.198557][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 169.203735][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 169.209451][ C1] ? read_tsc+0x9/0x20 [ 169.213496][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 169.219278][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 169.224368][ C1] handle_softirqs+0x283/0x870 [ 169.229117][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 169.233857][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 169.239117][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 169.244291][ C1] __irq_exit_rcu+0xca/0x1f0 [ 169.248855][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 169.254037][ C1] irq_exit_rcu+0x9/0x30 [ 169.258258][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 169.263868][ C1] [ 169.266778][ C1] [ 169.269695][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.275653][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 169.281443][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 df 96 eb 09 e8 8a 41 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 169.301039][ C1] RSP: 0018:ffffc9001c1e79b8 EFLAGS: 00000286 [ 169.307086][ C1] RAX: 1fb7f5522591a400 RBX: 0000000000000000 RCX: 1fb7f5522591a400 [ 169.315032][ C1] RDX: 0000000000000000 RSI: ffffffff8d9b9ce8 RDI: ffffffff8be33c00 [ 169.322977][ C1] RBP: ffffc9001c1e7a10 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6 [ 169.330960][ C1] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffff88806c02bc00 [ 169.338913][ C1] R13: dffffc0000000000 R14: ffff88801d6c8000 R15: ffff8880b873ab58 [ 169.346865][ C1] ? finish_task_switch+0x266/0x950 [ 169.352047][ C1] __schedule+0x17a0/0x4cc0 [ 169.356545][ C1] ? __lock_acquire+0xab9/0xd20 [ 169.361381][ C1] ? __pfx___schedule+0x10/0x10 [ 169.366212][ C1] ? schedule+0x91/0x360 [ 169.370460][ C1] schedule+0x165/0x360 [ 169.374594][ C1] worker_thread+0xa82/0xda0 [ 169.379165][ C1] kthread+0x70e/0x8a0 [ 169.383213][ C1] ? __pfx_worker_thread+0x10/0x10 [ 169.388308][ C1] ? __pfx_kthread+0x10/0x10 [ 169.392887][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.398066][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.403255][ C1] ? __pfx_kthread+0x10/0x10 [ 169.407822][ C1] ret_from_fork+0x436/0x7d0 [ 169.412387][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 169.417479][ C1] ? __switch_to_asm+0x39/0x70 [ 169.422219][ C1] ? __switch_to_asm+0x33/0x70 [ 169.426959][ C1] ? __pfx_kthread+0x10/0x10 [ 169.431526][ C1] ret_from_fork_asm+0x1a/0x30 [ 169.436286][ C1] [ 169.439522][ C1] Kernel Offset: disabled [ 169.443842][ C1] Rebooting in 86400 seconds..